Brett Galloway, CEO of AttackIQ, joins me on The Tech Talks Daily Podcast to discuss how security leaders can build a comprehensive defense-in-depth strategy to confidently report to their boards, auditors, and leadership teams the strength of their security posture. I ask why CISOs keep investing in more and more security controls when 82% of enterprise breaches that existing controls should have stopped weren't. Finally, we discuss why buying more silver bullet tools to combat evolving threats doesn't solve the underlying problem: how to be indeed confident in your defenses against adversaries.
Brett expands on his belief that the only way to do so is by gaining data-driven visibility into what's working across your whole system, people, processes, and technologies by continuously validating them. Then, organizations can build a comprehensive defense-in-depth strategy to stop intruders from breaching their applications, networks, and clouds by automating adversarial emulation.