KCLive Speaker Spotlight: Dirk Wahlefeld

This is a great question. Allow me to say the following first, the defenders are not necessarily doing something wrong, as long as they're doing something, what can't be improved. That's the rather interesting question. So here's an analogy. You all know the tail of the rabbit, running a race against the hedgehog. We all know who the rabbit is and who the hedgehogs are. What advice can therefore be given once an organization has understood that they are more likely in the situation of the hedgehog, think more tactical and operate more strategic. Being in a reactive position will never allow you to close a race gap between yourself and the opponent in front of you understand the strengths of the opponent, understand the why, the how and the, when, which allows you to counter and attack ahead of time. The more time given in advance to identify a campaign and role towards you. The more time you have to understand the use technology, the techniques and the procedures, which then allow you to implementing activities. Now, this insight and the preliminary time spend is the perfect addition to the current set of procedures and tools.
Another great quiz question to which I totally agree how many tools are nowadays in operation and use hard to estimate, but for sure, not just some few per organization question number one to consider is, are new tools available, which may consolidate multiple key functionalities of other individual tools. Question number two. And in my opinion, the more valuable consideration is the possible integration in consolidating platforms in our discipline cm or specifically solar platforms. Each of the tools may have its unique advantage answering the multiple challenges of cyber defense. Therefore, a core strategic decision is the necessity for data consolidation platforms for the purpose of monitoring and alarming. Another benefit of these data consolidation is the ability to source and correlate information. A better understanding in a larger context helps organizations to better determine the risk exposure, the reduction of noise and the elimination of false positive experiences, a growing attraction, given the large number of possible incidents to be investigated.