Texas Cyber Summit II

Stop accepting risk. Resolve every alert!
Organizations are moving to more sophisticated endpoint technologies to help improve their security posture and decrease their risk profile.  However, the fundamental issue of alert fatigue remains, and three solutions have risen to the top as answers for the “noise”.  Alerts can be ignored due to time and resource constraints, the noise can be turned down by disabling feature sets within the tools themselves, or third party MSSPs can be leveraged to address the alert overload.  Each of those solutions are accompanied by either intentional or unintentional risk acceptance.  By ignoring alerts or disabling feature sets within a security tool set, organizations are intentionally accepting the risk to their business that those alerts that were or would have been created were not IOCs.  Third party MSSPs can provide tremendous value to Organizations that lack the proper resources to address security.