One Article Review
| Source |  CSO |
|---|---|
| Identifiant | 8024580 |
| Date de publication | 2022-11-15 02:00:00 (vue: 2022-11-15 11:06:01) |
| Titre | Build a mature approach for better cybersecurity vendor evaluation |
| Texte | Seasoned CISO Mike Manrod knows the value of a good cybersecurity vendor evaluation. He recalls that in a past job he inherited some very expensive vaporware under a long-term services agreement. His predecessor had purchased an “innovative” beta identity and access management platform but hadn't done any analysis on the product, simply accepting the vendor's claims of its efficacy. It was a dud.Inversely, as CISO at his current company Grand Canyon Education, Manrod set his team up to evaluate an allegedly “brilliant” web application security product only to discover through testing that its client-side validation was easy to bypass and thus subvert the product. That basic test saved them from making an expensive mistake. “Startups are trysforming, and sometimes they go back to the drawing board. Nothing wrong there, but if we as security leaders purchase something that's not ready yet, that's on us,” he says.To read this article in full, please click here |
| Envoyé | Oui |
| Condensat | accepting access agreement allegedly analysis any application approach are article back basic beta better board build but bypass canyon ciso claims click client company current cybersecurity discover done drawing dud easy education efficacy evaluate evaluation expensive from full good grand had hadn here his identity inherited inversely its job knows leaders long making management manrod mature mike mistake not nothing only past platform please predecessor product purchase purchased read ready recalls saved says seasoned security services set side simply some something sometimes subvert team term test testing that them through thus trysforming under validation value vaporware vendor very web wrong yet “brilliant” “innovative” “startups |
| Tags | Guideline |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.