From the Vault: Remember When Computer Viruses Were The Scary Viruses?

Tech Challenges

The technological landscape in cybersecurity presents both opportunities and challenges. Rick Holland emphasizes that while the technology to secure networks exists, the real challenge lies in its scalability and the human resources needed to interpret and act on the data 1. He notes, "It's not purely a tech problem. There's the people in the process and the complexity of these modern environments that makes it difficult."

It's not purely a tech problem. There's the people in the process and the complexity of these modern environments that makes it difficult.

--- Rick Holland

Vince Houghton adds that the focus should shift from creating an impervious wall to resource allocation and damage mitigation, as breaches are inevitable 2.

   

Human Error

Human error remains a significant vulnerability in cybersecurity. Rick Holland points out that phishing remains a prevalent threat, as adversaries exploit human weaknesses 3. He suggests that small businesses, often lacking resources, should consider cyber insurance and managed services to mitigate risks.

It's a tough question too. When you look at budgets or even I look at my own budget, you know, every organization is budget constrained.

--- Rick Holland

Vince Houghton highlights the gap in cybersecurity awareness, stressing the need for broader education rather than relying solely on experts 4.

   

Process Complexity

The complexity of cybersecurity processes demands improved threat modeling and strategic planning. Rick Holland advocates for threat modeling to identify vulnerabilities, especially for organizations with limited resources 5. He shares an experience where allowing an adversary to persist in a system provided valuable intelligence, underscoring the importance of strategic intrusion response 6.

You need to have a plan in place the first time you get a notice from the FBI that there's an intruder in your environment.

--- Rick Holland

Vince Houghton concurs, emphasizing the need for situational awareness and planning for failure.