Measuring change: Responding to cyber material risk
summary
Argues that inventory plus automated image pipelines cut material cyber risk, using a Packer and Terraform pipeline that scans images with Prisma or Sentinel, issues dynamic credentials from Vault and uses Boundary for privileged access. Cites surprising numbers: average 270 days to patch, $4.5M per incident, 60% of breaches start with unpatched vulns and 90% include known vulns, and the SEC four day disclosure rule. Recommends a 30-day repave to remove patch windows and shrink blast radius.
AI-written summary · about
chapters (5)
- 0:00Introduction and context
- 2:46Industrialization and cloud automation
- 13:16Vulnerability and patch management
- 25:15Dynamic secrets and privileged access
- 34:16Future state and automation benefits
related talks
33mFrom Boardrooms to Polling Places: Securing Critical Infrastructure in 2024
20mEvolving from patch management to risk mitigation
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
30mThe **** we've seen- 43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
58mNothing to Risk but Risk Itself: Expanding Vulnerability Risk with Internet-Scale Data
59mMadness of Vulnerability Management in Modern Cloud, Container, How to Win the Battle...
41mThe Divine and Felonious Nature of Cyber Security