Richard D. Daniels’ Post

Lately I've been spending a lot of time looking over security finding data to find patterns used to improve remediations. Two things are very apparent: 1. There is enormous variability of quality between the tools and the findings they produce. I knew it was different from past experience - we have all heard the typical stats from sales calls from these types of vendors - but wow. 2. So many of the tools are clearly optimized for collecting security finding data - and reporting/trending at times - but the findings are never contextualized, organized, or communicated in a way for the people that are doing the real work to reduce risk, the remediators. Sorry IT and operations teams, you don't have enough on your plate already. Now just decipher some data from a tool you don't even have direct access to (and often times a tool you know nothing about) - recipe for success right there 🙄 I can't say I'm surprised. However, I've been wondering. Should an organizations CISO or CIO be surprised when there is such little progress made on remediation efforts based on this status quo?

2 great webinars this week! Please register to learn more about the data security industry, DDR and of course Cyberhaven. 𝐏𝐚𝐫𝐭𝐧𝐞𝐫-𝐄𝐱𝐜𝐥𝐮𝐬𝐢𝐯𝐞: “𝐀𝐜𝐫𝐨𝐧𝐲𝐦 𝐎𝐯𝐞𝐫𝐝𝐨𝐬𝐞: 𝐍𝐚𝐯𝐢𝐠𝐚𝐭𝐢𝐧𝐠 𝐃𝐚𝐭𝐚 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲” Who: Partners When: September 17th @ 10AM PT / 1PM ET What: From understanding the data security ecosystem of architectures, frameworks, and tools to making sense of all the acronyms, our quarterly enablement session will equip you with everything you need to be in the know. Our Partner team will also be joining to discuss updates and resources arriving in the next few months! https://lnkd.in/gcRwA2-z 𝐅𝐨𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐋𝐞𝐚𝐝𝐞𝐫𝐬: “𝐈𝐧𝐭𝐫𝐨𝐝𝐮𝐜𝐭𝐢𝐨𝐧 𝐭𝐨 𝐃𝐚𝐭𝐚 𝐃𝐞𝐭𝐞𝐜𝐭𝐢𝐨𝐧 & 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐞 (𝐃𝐃𝐑)” Who: Security Leaders & Professionals When: September 19th @ 10AM PT / 1PM ET What: Curious why the Gartner Data Loss Prevention (DLP) Magic Quadrant vanished? Intrigued by what that means for your security stack? Discover the emergence of DDR, an integrated data-centric approach that addresses traditional data security challenges like DLP, Insider Risk Management (IRM), and more. Learn why conventional approaches to data security have faltered and how combining data content with context is the future. https://lnkd.in/gMdYATyU

Don't underestimate how powerful remediation analytics can be in big organizations. We recently helped a customer track and boost their vulnerability fix-up efficiency across different parts of their business. Here's what I learned: 1. Make the most of built-in retest features Our platform's retest tool gives some really interesting insights into how different teams are doing. One customer found out their APAC team was fixing vulnerabilities almost perfectly - talk about efficiency! 2. Use detailed data to zero in on improvements This kind of in-depth info lets security teams: • Spot high-performing teams and learn their tricks • Find teams that might be struggling and need a hand • Keep an eye on repeated fix attempts to highlight stubborn issues • Dig into the root causes of ongoing problems 3. Let data guide your approach By using these metrics, you can really beef up your overall security. It's not just about finding weak spots - it's about efficiently closing those gaps and making your systems stronger over time. Remember, you can't improve what you don't measure. 📊 Are you keeping tabs on how efficiently different parts of your business are fixing vulnerabilities? If not, you might be missing out on some game-changing insights.

Shrink Data to Minimize Risk? OK, that’s a bit of a simplistic explanation, but essentially with the correct data discovery, classification and protection solution in place, the goal should be to only collect the data you need (reduce volume) and "shrink" the data attack surface against potential breaches. Our latest article - “Reduce Attack Surface for Data Breaches with Data Minimization” shows how data minimization can: - Pinpoint and eliminate data you don't need. - Give you a complete view of your data ecosystem. - Improve business operations without disrupting your workflows. - Protect your reputation and avoid costly fines. Take the steps you need towards data minimization - and risk reduction - LINK in the comments below to learn more… ⬇ #datadiscovery #dataminimization #databreaches #datasecurity

There are a multitude of benefits to deploying a #DataDiscovery capability into your organisation, 7 of which are listed in our report. By implementing a Data Discovery or Data Intelligence programme you will immediately gain insight into the data your organisation holds regardless of its age, sensitivity or location. You can read the report here: https://lnkd.in/efcxaRJw

3 Ways Secure Data Access Is Transforming Industry Standards -- My latest for CEOWORLD magazine. #data #security #SecureDataAccess #business #standards #datamanagement Thinkers360 Global Gurus 100 Coaches Agency Accountability Inc.

"We knew we had noisy data but not the extent of it, until we tried Abstract.” Our customers see over 60% noise reduction with just out-of-the-box rules when they integrate their data sources with Abstract, before routing it to destinations like SIEMs, XDRs, Next-gen SIEMs or Datalakes. 𝘞𝘩𝘢𝘵 𝘪𝘴 𝘯𝘰𝘪𝘴𝘦 𝘪𝘯 𝘥𝘢𝘵𝘢 𝘢𝘯𝘺𝘸𝘢𝘺? • Empty fields in logs • Service-service internal chatter – logs that don’t help in understanding threat or system failures • Redundant telemetry • Unnecessary fields that do not help in analytics No matter the destination, the quality of data matters! Not just for cost saving reasons (paying SIEM ingestion and storage costs on data that doesn't matter) but more importantly for security reasons. Don’t let your SecOps teams don’t drown in noise and miss critical alerts. Check out how Abstract can simplify data and amplify insights in your environment today!

As our COO Krishna Subramanian explains: Many enterprises don’t have clear insights into file types and sizes or usage patterns – such as how much of their data is rarely used or where their PII and financial data is located. Read how to use an unstructured data management solution to cost-effectively discover, classify and protect your sensitive data! https://lnkd.in/gmi-3uaM

https://lnkd.in/eq49NvbA ✨ Our latest Tech Talk: How to Discover, Classify & Safeguard Your Sensitive Data is now available on-demand. The 30-minute session covers how to: ⭐ Quickly locate sensitive information across vast datasets ⭐ Identify actionable steps to take upon data detection ⭐ Reduce your organizational risk footprint with visualization tools ⭐ Enhance your strategies for data security and compliance ⭐ Plus valuable Q&A

Traditional data management comes with its share of risks, and they can be costly. In our latest blog post, we delve into the hidden dangers of outdated methods and explain why they may be putting your business at risk. From data breaches to compliance issues, the consequences are real. Learn how modern data vault techniques provide a robust solution, enhancing security and ensuring your data's integrity. Don't wait until it's too late— Click the link in the comments to read the full blog post! #data #modernisation #datavault