Learning from Breaches

Rick emphasizes the importance of conducting after-action reviews within organizations to learn from past security incidents. He highlights that while comparing data across industries can be useful, understanding internal threats is crucial. The discussion also touches on the alarming fact that many breaches go undetected for months, raising questions about the balance between speed and thoroughness in incident response.