Cybersecurity leaders need to prove their programs work with numbers, not fear. A military base blocked hundreds of thousands of daily attacks by analyzing logs and updating whitelists, then showed the commandant concrete evidence their security budget was protecting critical data.
we still need to make sure we put those security things in place. Right.
When I was there, I kid you not, we were being attacked hundreds of thousands of times, almost a million times every single day. So what we were able to do to show to the commandant of the base there is, okay, look, we get attacked this much and this is only what came through, but look at what our technology is able to stop. Stop. And I was able to prove that by going through the logs of our IPS. And then we updated our whitelist often. And we did a lot of things to prevent exploitation of our crown jewel, of our data. But what I'm saying is try to think outside of the box and think of ways where you can prove that, yes, the budget you are spending in the security program, it is adding a lot of value. And this is the value it is adding. I think that makes a huge, huge difference.
Relevance and value, right? And it's not just for security, it's for any organization in the business. Absolutely. You have to be able to show that. We are not immune from that. We can't just use fear. Oh, there's bad things going to happen. We actually have to show it over time if we want to be sustainable.
Yeah. I want to talk about fear, right? There is a thing, FUD, fear, uncertainty, and what is the— Doubt.