Matthew Rosenquist argues humans aren't cybersecurity's weakest link. With proper training, visibility, and controls, people become a major strength instead. He pushes back against the tech-heavy approach that treats humans as problems to contain.
Chapters
I wanna start out by like contradicting the mindset, like the humans are always gonna be the issue. We've actually shown that in fact, with the right, you know, empowerment, with visibility, with training, with controls, we can start seeing humans be one of like the greatest strengths of a cybersecurity program. That's something that I'm really passionate about. But you know, at the end, like at the end of the day, why are we here? Humans aren't like X's and O's and 1's and 0's. And so the traditional like cybersecurity staff that's been investing millions of dollars in like cyber, tech, and tools, they're much more comfortable with like black and white, and people just are not that way. And so, we needed to take a different approach in how we handle that, how we manage risk around the human.