The Difference Between Detecting A Potential Breach And Disclosing A Disaster

By Nir Polak, CEO and co-founder Exabeam

As we approach the end of 2015, it’s time to look back at some of the biggest breaches that rocked the data security and prevention world and reflect on the lessons learned. As I started to think back on the top stories over the last year, the first one that comes to mind is from February, which detailed the U.S. State Department’s inability to control a data breach more than three months after its detection. Cybersecurity has long been defined by preventing breaches. However, it’s no longer viable for the companies you work with to focus solely on prevention. Breaches are still happening despite their efforts. The State Department, for example, suffered a compromise of more than 21 million records before anyone discovered the issue. Learning to detect breaches with solutions designed to monitor user activity can help companies identify breaches before they become disasters that compromise employee, customer or partner records.

Why Prevention Fails To Address The Problem

Security work often follows this process:

• detection
• analysis
• containment
• resolution

Please log in or register below to read the full article.