Writing
On sovereign security, containment over detection, and the architecture of systems an enterprise can actually trust.
The perimeter is hardened, the laptops run EDR, the email is filtered. Meanwhile the application where employees now spend the entire day, the browser, sits in the blind spot between all of it, largely ungoverned.
Read →The security industry has spent two decades getting better at recognizing attacks. It is a race the defender structurally cannot win. There is a different bet, and it changes what you build.
Read →To prove you controlled sensitive data, the usual audit trail records the sensitive data. You have built a second store of exactly what you were trying to protect. There is a way to keep the proof without keeping the exposure.
Read →