Security Tools Alone Don't Protect You — Control Effectiveness Does
I so like the title to this article.
Having spent a considerable amount of money on updating my cybersecurity skills and continuing to practice my red, blue and purple skills, I whole heartedly agree with this article.
The Hacker News
This massive rate of security failure is clearly not a security investment problem. It is a configuration problem. Organizations are beginning to understand that a security control installed or deployed is not necessarily a security control configured to defend against real-world threats.
It's not the tool, but how you use it.
About three years ago I bought my first Ubiquiti AP. The reason was the advanced firewall I had invested in did not have AP functionality, so I needed one. After spending two years with my firewall, running an Ubiquiti controller via a container to manage it, I decided to replace the whole network with an Ubiquiti affair, buying a gateway, adding another AP and replacing all my dumb switches with Ubiquiti managed affairs.
It was and still is the best money I have ever spent on my cybersecurity hobby and training. Not only has it allowed me to gain a complete perspective of my network, allowed me to enhance my networking skills, practice zero trust, increased my knowledge of networking flows, it has now allowed me even greater insight as to what is going on within my network via the Ubiquiti CyberSecure service that I have recently subscribed too.
I turned it on fully when I got home, and the insights it is providing is amazing and frustrating at the same time.
All this in turn as led me to close down services I previously used to provide me with a level of trust in that my network was secure and that my children where not compromised or indeed compromising the adult's systems.
So yeah, I agree. Find a few tools and use them well.
Unfortunately, other members of the family don't see the advantages in this and run obsolete and dated software and hardware. No comment.
#enoughsaid.