The Persistent Pernicious Myths and Hidden Truths of Cybersecurity

IT implementors are made less successful due to ‘Technical Debt’. Cybersecurity suffers from ‘Myth Debt’, where the same untrue tropes are repeated and hold us back. It takes experience to recognize these myths, but worse still is they can mask the valuable truths that lie within the myth. These never-dying misunderstanding spread outside cybersecurity and falsely inform the IT and business leaders, making it harder still to stop bad things from happening. So let’s poke some holes in some myths, pick some or all: •Insider threat is the biggest worry •Great Pen Tests mean excellent security •Any attacker motivated enough can hack you easily •Security training and education of devs will get us secure code and apps •The cloud is secure. The cloud is insecure •Encrypting everything makes for strong security •Spending more on security makes security better •Excellent endpoint security means we no longer have to worry about network or other security •You can’t defend yourself against ransomware Moderator: Jorge Orchilles, SANS Certified Instructor Speakers: Greg Young, VP, Cybersecurity, Trend Micro Zane Lackey, Co-Founder, Chief Security Officer, Signal Sciences Dr. Cragin Shelton, DSc, CISSP