Why Security Controls Need a Source of Truth | Garrett Hamilton on TAG Infosphere

Every security team has a source of truth for its assets and its identities. Very few have one for how those assets are protected.

Here Garrett explains what that source of truth has to look like and why it has to be deterministic.

Garrett joined Ed Amoroso of TAG Infosphere for a wider conversation on AI, security controls, and assurance. The full interview covers:

› Why AI-driven scanning surfaces missed basics faster, from forgotten exceptions to MFA left on a departed user’s VPN account
› Why determinism matters when the question is whether you can keep an attacker out
› Prioritizing vulnerabilities by whether your controls mitigate the techniques used to exploit them
› Taking the fear out of security changes by giving teams visibility into their impact first
› Why staying one version behind on patching no longer holds up

Full interview: https://f.mtr.cool/esp7oyz9c9

#Cybersecurity #ReachSecurity #ExposureManagement