Security News > 2021 > April > The SOC is blind to the attackable surface

Organizations have piled security controls upon security controls, and still remain largely blind to the most serious threats they face.

Firewalls, vulnerability management and endpoint tools may offer a base layer of protection, but they are inherently weak without an added layer that includes analysis of daily exposures caused by configuration errors, exploitable vulnerabilities, mismanaged credentials and other common points of risk.

Relying on conventional processes often leaves security staff in a familiar position: besieged with alerts and endless software updates and patches and operating without proper guidance as to how to approach remediation and risk.

A scanner using standard CVSS scoring can tell you the severity of a vulnerability, but it cannot always go a step further and provide insight into the level of risk that vulnerability truly poses to your business-critical assets.

Conventional security controls have their place, yet they cannot provide the full perspective needed to effectively manage exposures and risk without some assistance.

Full visibility - and a deep appreciation of criticality and risk - are the keys to maintaining a SOC that runs smoothly and effectively.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/gKHWGwbLN1g/