利用人员流程和技术克服网络安全贫困线的成本效益策略

Overcoming the CyberSecurity Poverty LineCost E�ective Strategies Using People, Process, and TecnologyRobert Wagner@Mr_Minion@Mr_Minion@infosec.exchangeAdvisory CISOAdvisory CISO / Managing DirectorCommunityHak4Kidz Co-FounderISSA Chicago BoardChicago CISO of the YearBurbSecBSides312Do me a favor?Take picturesPost to socialIntroductionSmall Businesses Keep Making the Same Mistakes Large Enterprises Made 20 Years AgoI Wrote This Talk BecauseCyber Security Poverty LineThe line below which an organization cannot be e�ectively protected -- much less comply with -- security regulations. Wendy Nather, 2010MoneyExpertiseCapabilityIn�uencePrimary HurdlesUnderstanding the Impact on Small BusinessAttacks targeting Small-to-Medium Enterprises comprised46% of all attacks in 2021--Verizon Breach Report 2021Cyberattacks cost SMEs an average of$200,000 per �rm......and 60% of (SME) victimsgo out of business within 6 months.Hiscox InsuranceWhere Do We Start?Too Much Focus on TechnologyPeople"Talent