GET THE BASICS RIGHT because basics never change because basics support complexities because basics are time tested and proven

Because basics were missed!Database of 191 million U.S. voters exposed on Internet as a result of incorrect configuration

Database leak exposes 3.3 million Hello Kitty fans

The personal information of 150,000 consumers who went into bankruptcy between 2007 and 2011 - including their SSN - were exposed after company failed to properly redact court records before they were put on the public access to Court Electronic Records system

Code.org - Volunteer email addresses were left accessible via web browser

What caused Humpty Dumpty’s fall apart?

Was the foundation weak?Did Humpty Dumpty miss the basics?

Change in Management / Leadership

ChangeManagement

PatchManagement

Anti-VirusManagement

Identity & AccessManagement

SupplierManagement

Aware &Knowledgeable

culture

IndustryCollaboration

SecurityAnalytics

System Hardening

Exponential GrowthAcquisitions and Mergers

Context of OrganizationClient Business Imperatives

Know Thyself …

REGU

LATO

RY

INDU

STRY

CLIE

NT

Mirr

or

Mirr

or

Security Imperatives =Basics + New Priorities + Complexities

How big the issue looks in mirror? & Effort Spent

We don’t know

what we don’t know

We know what we

don’t know

We know what we know

We don’t know what we don’t

know

We know what we

don’t know

We know

what we know

Real

Wor

ld

Get / Keep the BASICS right for a strong foundation

Defenders are mired in FUD (fear, uncertainty and

doubt) and fairy tales

Fantasy World

Cyber security will never be

“solved”

but has to be

“managed”

Thanks - Rishi Rajpal