Does it actually make sense to have multiple cybersecurity point solutions that serve the same purpose? Or does that added complexity just weaken your overall security posture?
Sort by:
Not something I recommend. Multiple point products add confusion, complexity and increase cost which ultimately leads to poor security (and technology) outcomes. I recently attended a conference where the speaker cited a study showing the average Fortune 500 company has 76 security point products. Of these, only half are fully deployed. That is a lot of shelf-ware.
Understand the business problems you are looking to solve and then focus on the tools. Keep a sharp eye on the portfolio and outcomes. And don't chase the silver bullet technology. That is what got us here!
It depends on how good the solution is at addressing your security needs. I lean towards simplifying the security stack, but in some cases existing solutions just don't provide the level of security that you need. If your company works with a major technology vendor that purports to be everything to everyone, then even if it does some things really well, there may be other things that it doesn't do well at all. For example, maybe that vendor doesn’t have a great privileged access management solution, in which case you would need to get something like CyberArk. It just depends on how good each of your solutions are at doing what they purport to do.
I have used different solutions when it was better for geo location needs and the teams. Some vendors solutions just don't have the needed support in all locations.