The Need for Evidence-Based Security

Christopher Frenz

In recent years, there has been an uptick in cybersecurity spending within most organizations, yet at the same time, there has not been a corresponding downtick in data breaches.  In fact, studies show that despite this increase in expenditure, data breaches are actually on the rise.  As cybersecurity professionals, these seemingly paradoxical trends occurring in tandem should really make us pause and question how we are going about securing our environments. How can we truly evaluate and determine what we are doing right and what we are doing wrong?