Is there such a thing as having too many security tools?
We've been seeing these security incidents for years, and it's just history repeating itself over and over again. I'm waiting for some innovative startup to come along and fix a good portion of the rainbow. We need to figure out the best way to approach zero trust without overdoing the tool situation to detect everything.
You could spend your entire IT budget on security tools. Most CIOs I know complain that I keep adding more security tools, but I never take anything out. You end up laminating over this stuff and the tools are tripping over each other and their update cycles are wrong.
The VC community is still pumping lots of money into point solutions in the security space, that's the problem. Because they're playing for an exit strategy of an acquisition by somebody bigger: “let's make some cool, niche thing so somebody will buy us.” And then they have a hodgepodge of things that don't work together. Security has been a big thing for the last 10 years and I haven't seen anybody come up with the “all-singing all-dancing” solution, or even architecture for one.
That's a good point. And that's been a problem in all of IT, not just security.
Content you might like
organized a virtual escape room via https://www.puzzlebreak.us/ - even though his team lost it was a fun subtitue for just a "virtual happy hour"
Yes41%
No15%
Sometimes42%
Production45%
Backup64%
Replication34%
Non-production DBs (Dev, Training, QA, etc.)31%
We're technology people so we tend to drive into the tools a little early. Our clients are getting all these alarms and alerts, but they get so many because they don't have any thresholds set for the ignore factor. If you're getting blasted with alert smog, there are so many alarms that you don't pay attention to them anymore. But some of those alerts are for real threats. There's a signal to noise ratio to get filtered out, but how do I do that?