Following my previous post, a question for management: Who is responsible for your security in July?<\/p>\n
In many companies the honest answer is \u2018a consultant on call who has never seen our environment\u2019 or \u2018the summer intern\u2019. Not because anyone decided it, but because everybody else is on vacation.<\/p>\n
The attackers know this. So the four weeks when you have the least capacity are the four weeks when you are most likely to need it.<\/p>\n
This isn\u00b4t about making people skip their vacation. People need to rest, and a tired security team makes mistakes. It\u00b4s about planning. Stagger the vacations so you always have someone who knows the environment. Make sure that person has the mandate to act, including shutting things down if needed, without waiting for a manager on a sailing boat. If you don\u00b4t have the people, buy a SOC service that runs all year round, and make sure they know who to call.<\/p>\n
And treat security staff like the critical resource they are. Good people are hard to find and easy to lose. Pay them, train them and give them reasonable working conditions.<\/p>\n
An empty office in July is a business decision. So is the security that comes with it.<\/p>\n","protected":false},"excerpt":{"rendered":"
Following my previous post, a question for management: Who is responsible for your security in July? In many companies the honest answer is \u2018a consultant on call who has never seen our environment\u2019 or \u2018the summer intern\u2019. Not because anyone decided it, but because everybody else is on vacation. The attackers know this. So the […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[11,4],"tags":[38,30,72],"class_list":["post-1216","post","type-post","status-publish","format-standard","hentry","category-business","category-security-architecture","tag-business","tag-soc","tag-staffing"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1216","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1216"}],"version-history":[{"count":1,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1216\/revisions"}],"predecessor-version":[{"id":1244,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1216\/revisions\/1244"}],"wp:attachment":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1216"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1216"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1216"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}