Short video/transcript urging organizations to select and consistently follow an established cybersecurity framework (examples: CMMC, CIS v8, NIST) rather than randomly assembling tools. The speaker recommends choosing a framework, aligning the security stack to it, keeping controls up to date, and notes frameworks largely map to one another.
The most important thing when you're looking at your stack is to make sure that you're following some sort of cybersecurity framework. If you're just throwing out tools randomly to try and solve for a problem, you're not doing things the right way. Pick a cybersecurity framework, whether it's cmmc. If you're using. If you have customers that need to follow cmmc, you should be following that as well. If you don't have a specific framework that your customers need to be following, just pick one. Whether it's CIS version 8 NIST cybersecurity framework, just pick one. Eventually, probably very in the very near future, we're all going to have to follow one. It may not even exist yet, but they all map pretty closely to each other. So just pick one. Make sure you follow it, adhere to it, have a reason for the things that are in your stack, and if you can follow that and keep those things up to date and make sure that you have those proper layers in place, you'll always be ahead of the game.