“We haven’t stopped huge breaches. The focus now is on resilience, with smarter ways to detect attacks and faster ways to respond to them.”  MIT Technology Review, January 2016 There is a lot of talk about shifting the information security posture from a focus on prevention to greater emphasis on detection and response. In a world where you assume everyone is breached, the logical strategy involves rapid identification and containment. It doesn’t mean you stop patching vulnerabilities. It does mean that organizations need new tools, processes and, in many cases,…

Barkly recently released a survey of 350 IT professionals to gauge their confidence in the existing information security infrastructure. One key finding is that 50% have confidence in their current security posture. According to Barkly researchers, that means 50% are not confident. A Dark Reading article reported that Barkly co-founder and CTO Jack Danahy “found it startling that such a large number of respondents in the survey don’t trust their security solutions. ‘Around half of the people we talked to don’t have confidence in the choices that they’ve already made,’…