There's what I'll call best practices and then there's…
“There's what I'll call best practices and then there's reality. Based on our research over the past two to three years, there are significant differences in performance results that companies are experiencing with their security programs. There are some common things that are done very well among the best-class enterprises suffering the least amount of breaches and damages. But even having said that, there's probably no way to defeat a serious security threat today and it wouldn't matter what the tool is. The only way to do that would be to unplug the computers.”
About This Quote
This interpretation was drafted with AI assistance. It is one reading of the quote, not the author's own explanation.
Best practices differ from real‑world security outcomes; no tool alone can stop serious threats.
In simple terms: Best practices ≠ reality; tools insufficient alone.
Key Takeaway
Combine practices with realistic threat modeling.
Themes
cybersecurity
risk management
practicality
Mood
analysis
observation
Type
Amount:0
Best practices:1
Breach:1
Business:0
Class:0
Common:0
Common things:0
Company:0
Computer:0
Cybersecurity:1
Damage:0
Defeat:0
Differences:0
Done:0
Enterprise:0
Hacker:0
Matter:0
Over the past:0
Past:0
Performances:0
Practice:0
Program:0
Reality:0
Research:0
Results:0
Said:0
Security:1
Serious:0
Significant:0
Suffering:0
Threat:1
Three:0
Three years:0
Today:0
Tools:0
Two:0
Way:0
Wells:0
Would be:0
Years:0
Defeat Security:0
Security Programs:0
Suffering Breaches:0
Experiencing Security:0
When to use this quote
- Overemphasis on tools may neglect human factors.
Key Concepts
enterprise security
incident response
tool evaluation
Questions to Reflect On
- cautious
- pragmatic
A Different Perspective
How do you balance policy and technology?;What human behaviors heighten security risk?