Once the PHP fire dies down, tell your board this is what a dry run looks like. Daily events, and at much higher impact, are already here. We will hear of them more, and more.
I’ve been writing on this for a while, and the time is now. The point isn’t to spread FUD, it is to start thinking of our plans for handling the flood we already know is here, today.
What are *you* doing to prepare?
Me? A short list to get everyone started, with clear reprioritization.
Tech:
- Get everyone on agents - now. Right now
- Secure agents - control before visibility - now
- Deploy deception, liberally - whatever we can get to, this year
- Plan for a day “without patches”, and for now, focus on tactical wins. Example: aggressively reduce attack surface. Regression tests everywhere, prioritized beyond even fixing knowns. We are too slow to keep up
- In what time you have left, continue on your basics.
Governance:
- Improve governance to accept new vendors and technologies much, much faster
- Clearly communicate with stakeholders on how the landscape has shifted, and will affect business.
We must work on this together as a community, and cut through the noise to understand what we *can* do.
We can start at [un]prompted, next week.