@zackwhittaker And executives are easily duped by the cybersecurity industry’s multi-layer profit making system. Consultants, research orgs, distributors and resellers, etc. Plus they are more easily influence by product conglomerates like “We are a Palo shop”.
I’m also seeing so much “tool focus” as in we need to an ABC tool to fix this when the fundamentals around that problem aren’t even being done well. The LLM craze has made it even worse.
People -> Process -> Technology
Execs have gotten so hung up on their insane belief that people are replaceable cogs that they don’t understand that technology won’t fix your cybersecurity problems unless good People are building good Process and good Technology configurations. Buying a new shiny doesn’t magically make cyber better.