Teaser: The Cybersecurity Exodus Problem
At the end of the day, we can't lose any more security staff than we already are, either to security vendors or to different parts of tech. And so we need to find ways to manage that a little bit more effectively.
And I see CISO's really prioritizing analyst experience as a part of their yearly goals because they want to be able to train and build the staff more effectively. Now, if you're flooding them with 5, 000 alerts that are kind of boring to go in, evaluate and figure out if they're right or wrong. They're not going to be enjoying their jobs.
They're not going to be contributing effectively to the work. And it's going to be a big waste of their time on top of it and a waste of your resources. So there's a lot of reasons why beyond the initial upfront cost of ingest that you need to be careful with how you approach using some of these tools.
Full episode at: • Detection vs. Noise: What MITRE ATT&C...