Cybersecurity - Why you need to shift from prevention to detection
Gartner had advised organizations to shift their spending from threat prevention to threat detection and response back in June of 2014, but the shift has been slow to happen. Why does this matter?
The evidence is clear, it is virtually impossible to prevent all threats. If just one element of technical controls is not perfectly aligned, or one user with credentials is compromised, hackers can penetrate and expose valuable data. What’s worse is that while the “time to detect” statistics of an average 205 days from breach to detection in 2014 decreased to 146 days in 2015, that’s still far too long for hackers to go undetected in our business networks.
One of the biggest challenges businesses have faced with detection is resources. You can’t simply deploy a tool – someone has to be updating it for emerging threats, applying threat intelligence and customized business rules to tune out false positives and monitoring 24/7/365 in order for the tool to provide value.
Our ProVision solution allows organizations to outsource that burden to us, leaving them able to focus on their mission. We help clients in all sectors, including education, finance, medical, legal, insurance, and retail, to meet compliance requirements for monitoring and to be assured that they are proactively taking on the challenge of adding detection to their defense against cyber threats.
Comprehensive Retirement & Financial Planning for Busy Ophthalmologists
8yPrevention and detection are now part of the new paradigm that requires a layered approach. Prevention is obviously still important but not the only layer needed to protect the organization.