If you’re a security executive new to an organization you know better than most that you often suffer from not knowing the state of your security posture and because of this you are forced to operate tactically. What’s needed is a baseline about the current state of your security posture across people, process and technology which ultimately alleviates headaches and allows you to approach security more strategically.
I know, I know, the old “people, process and technology speech” – but give me a second, because this is a new approach that actually works without software snake oil or magic appliances that are “Making the world a better place…” I couldn’t resist the Silicon Valley reference.
