Mad Irish . net

Capability * Intent != Risk

Traditional formulas of risk assessment applied to cybersecurity simply do not work due to the fundamentally different landscape of cybersecurity. Assessment based on capability breaks due to the proliferation of computation, internet connection, and commodity attack tools. Applied to physical threats historically this framework functions because access to resources is limited. In an arena where capability extends down to every child with a tablet and where financial motivation drives most attacks traditional application of physically based nation state threats crumbles.

Threat Intel Feeds Suck

Traditional cyber threat intelligence feeds offer incredibly limited value and reflect an outdated approach to intelligence in general. The industry needs to consider new approaches to operationally focused threat intelligence to derive true value from the investment.

Tags