- Detection-based IT security solutions have never worked, and will never work.
- More security layers is not the answer, but smarter layers can work.
- Shift your mindset from “prevent, detect, and respond” to “isolate, contain, and control.”
Layer after layer of security is not stopping breaches. We can’t keep the bad guys out. Oddly enough, 80+ years ago we learned it was mathematically impossible for detection-based security to stop cyberattacks. There will always be vulnerabilities for criminals to exploit, yet IT security continues down the detection-based path. Organizations continue to add on more security layers, hoping that each new layer will be the answer. And yet, ransomware, phishing attacks and data breaches are the new normal. We are inundated with news reports, and yet we feel unable to protect ourselves, our data and our intellectual property.