The history of cybersecurity technology

Real progress was made in vulnerability scanning 15 years ago. Suddenly, we could know where problems were and fix them. Then, two things happened: The numbers of things that could be "wrong" went up by orders of magnitude, and the vulnerability scanner market became commoditized. While problems increased, innovation slowed and then stopped. Today, scanners create reams of data for where a problem "might be," and they spend most of their time arguing about who has the best reporting.
Network probes showed theoretical pathways through our networks, revealing which paths could lead to critical assets. This was a step in the right direction, but even with perfect knowledge of your network access control lists, it's impossible to have a good defense without knowing what's happening on the endpoint and with your users.
Threat feeds emerged. "Research-as-a-service" gave a better understanding of attacks happening somewhere else. But, like a home security system that indicates when burglars are in your town but doesn't know if your doors are locked or your safe is open, threat feeds predict abstract risk but can never confirm where real risk is on your network.

Fast forward to today

Teams that are responsible for the safety of an organization need your support to develop a modern vulnerability management program built on understanding risk using automation. Organizations that don't support this run the risk of staff turnover, unmanaged cybersecurity risk and a host of compliance issues. Even the people who stay will ultimately feel demoralized and exhausted.

Instant Insights /

Helping cybersecurity teams solve risk, HR & compliance issues

More From HR Executive

Related Stories

Recommended For You