The Four Dimensions of Building a Security Program
summary
Andy Ellis explains how experienced chief security officers evaluate where to invest next in security, presenting a four-dimension rubric for deciding whether to fund technology versus programmatic improvements. The session focuses on practical criteria for prioritizing security investments so attendees can apply the rubric to their own organizations' next security decisions.
AI-written summary · about
chapters (11)
- 0:00Introduction and logistics
- 1:09The myth of defense in depth
- 2:24Lessons from the Maginot line
- 4:46Rethinking security paradigms
- 8:05Metrics and their pitfalls
- 17:21Measuring true efficacy
- 21:01The four dimensions of attack
- 24:50Asset management and control
- 29:11Structuring defensive controls
- 34:00The ransomware story
- 37:52Continuous maturity and Q&A
related talks
31mRound Table | What Is Security Worth?
20mSecurity Smarts for the Self-Guided IT Professional
19mGetting Your Security Budget Approved Without FUD
30mThe Four Tribes of Security Champions
51mThinking Differently About Security
20mThe Pyramid of Protection: Rethinking Layered Security
30mEffective security on a tight budget
36m5 Steps to Drive Enterprise Software Security