| | DECEMBER 2024ENTERPRISE SECURITY8IN MY OPINIONIN MY OPINIONENDPOINT SECURITY REQUIRES COLLABORATIONBy Michael Francess, Sr. Manager, Cyber Security Advanced Threat, Wyndham Hotels & ResortsHaving worked in several different-sized security organizations the consistent challenge when it comes to hardening endpoints did not just come from deploying a modern technology control or more data collection. The key driver to success was the culture of collaboration across multiple groups to holistically make changes throughout the computing environment to future improve endpoint resilience. I have observed amongst my peers across different industry verticals that one of the core challenges teams have to execute meaningful change is due to siloing of responsibilities or the inability of teams to work together to solve problems due to the corporate structure or culture focused on individual success above group success. I have come across Security Operations teams that do not have sufficient understanding of not only their networks but also a lack of visibility or understanding of other security controls owned or managed by other teams due to the lack of meaningful information sharing and willingness for the security organization to invest in a single mission to secure the company. I find too many organizations are not focusing on reducing their security alerts or events but investing in larger automation tools to help automate the triage of the existing, or even growing, alert count. We need to shift this paradigm.For any sized cyber security organization, having strong relationships between your IT operations, engineering, and security teams is so crucial as commodity security events can be prevented with well-thought-out and executed controls across multiple layers. For example, while your Michael Francess
< Page 7 | Page 9 >