Practice & Orientation
Need for protection before tool selection
The initial question
Which data and functions are particularly important for the process under consideration? Who is allowed to access it and what would be the effects of a failure or misuse?
The common stumbling block
Technical controls are set up without clarifying their responsibility and application in everyday life. In the event of exceptions and disruptions, gaps in the process then arise.
The practical experiment
Discuss a complete process with development and operations. Mark trust boundaries, necessary authorizations, and how to handle deviations.
Practice & Orientation
Before the Security Product Comparison: Five Practical Questions
What needs to be protected?
Start with a specific business process and name the data and systems that are indispensable for it. Then ask which disruption would be particularly serious and what protective measures are already in place.
Who works with the result?
An alarm needs a receiver, a decision and, if necessary, a reaction. Therefore, before a pilot, check who operates the product, how messages are classified and how an escalation works.
How is the selection checked?
Define comprehensible success criteria: suitable data sources, understandable messages, integration into existing tools and a sustainable operating model. Consider implementation and ongoing costs in equal measure.
Focus of this page: Cybersecurity technologies and services.