Another security tool? That may not be what you are missing.

I walk into quite a few organizations that have already bought almost everything. EDR, SIEM, DLP, a scanning platform, backups. Sometimes there are so many systems that nobody really knows who is watching what anymore.

Then I ask:
What risk worries you most right now?
Who is supposed to handle it?
What has to happen in the next three months?
And how will management know we actually made progress?

That is usually when the room goes quiet.

And that is fine. This is not a technology problem, it is a management problem. What is missing is someone who connects the people, the systems, the regulation and the business, and says plainly: this is urgent, this can wait, and this we can skip for now.

Before buying another tool, it is worth stopping. Map the risks, pick the three things that really matter now, give each one an owner and a date, and only then check what is missing.

In most cases you find out you are not missing another system.
You are missing order.

#InformationSecurity #CISO #RiskManagement

Originally published in Hebrew on LinkedIn: view the original post