To find out if you need an umbrella it might be sufficient to take a look out of the window. However, your umbrella will not serve you well, if you end up in a full-scale hurricane. And preparing for long term climate change is an entirely different game.
Advanced Cyberdefense is very similar. To fend off a specific malware campaign you can turn to multiple point solutions. But for truly building up resilience you need to know what is going on at a much larger scale. Major mishaps like Solorigate did not just come out of the blue.
Security Intelligence is your weather forecast (albeit more reliable), to make sure you are best prepared for the next cyber storm.Intelligence-led security in practice
vulnerabilities are published on average per month. A lot are exploited "in the wild" immediately.
highly skilled, professional attack groups have been identified by MITRE.
of patches for known vulnerabilities in security products take more than 30 days to get applied.
was the median time between intrusion and detection of a breach in organizations fighting this battle on their own.
Identifying the signals to focus on is hard when your only available angle is limited to your organization.
It is important to use the full capacity of current security technologies and know which ones are future-proof.
Potential vulnerabilities are one thing, but what is actively exploited often is a different matter.
Budget is limited, so make sure to spend it where it has the most impact.
…invest resources where they have the most impact and demonstrate security ROI.
...react faster and smarter to new threats and campaigns.
… make the right strategic, operational and tactical decisions.
…remain agile while safely enabling your business.
When all you need is an umbrella, building a storm-shelter is overkill. When all you have is an umbrella, but you actually need a storm-shelter, you are in trouble. Understanding the weather is crucial. Intelligence is what makes the difference.