Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Navigating Cybersecurity Innovation and Maturity in 2021

netspi.com | blog | #risk-management | #startups | #cybersecurity-industry | #innovation | #program-maturity

Summary

Jim Routh argues cybersecurity innovation originates with early-stage vendors rather than market leaders, with advice on evaluating emerging technology risk and driving program maturity.
Published
Collected

original ↗

Related coverage

blog · hackerone.com
Why Economic Downturns Put Innovation at Risk And Threaten Cybersafety
Marten Mickos warns the SVB collapse could starve security startups of funding and slow innovation; past downturns saw cybercrime jump 40%, making defensive innovation investment essential.
blog · netspi.com
Celebrating NetSPI’s Partners of the Year 2024
NetSPI celebrates its 2024 Partners of the Year—Defy Security, VLCM, Softcat, Enduir, Evotek, and AWS—after a year in which its partner community grew 62% and partner-sourced bookings rose 252%.
blog · netspi.com
2022 RSA Conference: What Makes Us the Most Innovative Pentesting Company?
NetSPI wins the Global InfoSec Award for Most Innovative in Penetration Testing at RSA Conference 2022, with leadership reflections on reconnecting in person and what drives the company's innovation.
blog · netspi.com
A Checklist for Application Security Program Maturity
A phased checklist for building AppSec maturity: keep practices current with SDLC and DevOps changes, benchmark against industry data, and use roadmaps to prioritize remediation.
blog · netspi.com
Prioritize Threat Modeling and Pre-Social Engineering to Foster a Security Culture
A startup security leader recommends threat modeling paired with frameworks to build a program skeleton, plus 'pre-social engineering' education, to embed security culture early.
blog · netspi.com
The Value of Detective Controls
Preventative controls dominate security spending, but since not every attack can be stopped, detective controls deserve more attention — though noisy IDS/IPS and unreviewed logs often undercut them.
back