Cyber confidence must be tested, never assumed
Internet security teams are not short of information. Threat intelligence feeds run around the clock, vulnerability scanners flag thousands of issues a month, and high-profile CVEs dominate the news cycle before most teams have finished their morning coffee.
What is far harder to come by is proof. Raw data is one thing, but what about evidence that the controls sitting in your environment actually detect and respond to the way real attackers behave, in your specific network, today?
Senior Director of Solutions Engineering, Rapid7.
That gap is what purple teaming exists to close, and it is where the surprises tend to show up. Running these exercises with organizations that have invested heavily in their security stack, I have repeatedly seen gaps nobody expected, missing telemetry, misfiring detections, and attack paths nobody was watching.
The problem was never simply being under attack. It is being under-validated, and mistaking spend for assurance.
...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
