Are you considering a move to the Gartner SASE model?

Disruptive & Emerging TechnologiesEngineering

Yes, going with a best of breed model - multi-vendor27%

Yes, going with a single vendor SASE model44%

Learning/Planning Phase9%

No.18%

190 PARTICIPANTS
1.9k viewscircle icon2 Comments
Sort by:
Director of Enablement2 years ago

Whatever you choose, it’s imperative that you select a SASE approach that allows you to scale seamlessly (as flexibility and speed are one of the key hallmarks of this architecture)

You may only be worried about ZTNA/SSE today, but you have to think about the future. If you want to migrate your branches to an SD-WAN provider, does it make sense to onboard a second vendor - or should you just expand your SSE solution to include sites?

To me the choice is obvious

Co-Founder in Services (non-Government)2 years ago

 As with many things in security, it depends. SASE, for example, includes SD-WAN, while SSE doesn't have SD-WAN. There are so many things to learn here. I've been spending a lot of time with SASE and SSE and would be happy to discuss the topic if anyone is interested

Lightbulb on1

Content you might like

How do you think AI will disrupt business across industries? Add to my list: 1. Content creation 2. Photos and video production 3. Basic coding and debugging 4. Strategic analysis to be highly complimented 

Read More Comments

Has AI increased your cloud costs?

Yes, significantly29%

Yes, but not by much54%

No15%

Not sure2%

View Results

As part of our NYSE IPO prep, we’re debating how to communicate our system hardening efforts in regulatory disclosures (e.g., SEC Form 20-F, SFC).

Would you recommend sharing % compliance (e.g., “85% CIS Tier 2”) or sticking to qualitative descriptions of how we identify and mitigate risks? Also, do SFC/ISO 27001 expectations require full ISMS integration, or is a % model acceptable?

We’re preparing for an IPO on the NYSE as a Foreign Private Issuer and evaluating CIS Benchmarks to measure OS and database hardening.

Our proposed tiers:
• Tier 1 (70–80%) baseline
• Tier 2 (85–90%) for sensitive data
• Tier 3 (95–100%) for mission-critical systems

Is 80% compliance defensible for IPO due diligence with SEC or SFC? Should Tier 3 be considered mandatory for critical systems? And can compensating controls (e.g., PAM, microsegmentation) offset gaps in legacy environments?

Which parts of your organization use digital adoption software like Walkme or Whatfix?

We don’t use digital adoption tools17%

Sales41%

IT29%

Others6%

I don't know5%

View Results