As CISA Downsizes, Where Can Enterprises Get Support?
As CISA Downsizes, Where Can Enterprises Get Support?
Companies like black hills infosec have tons of free stuff. Also all the free tools like nuclei, zap, opencve, and shodan.
Best practice is still best practice. Now companies will just have to spend more money on it.
TL;DR: Privatize all the security! Fuck you, pay us!
Enterprises? Hire capable SecOPs to staff your SOC and pay for audits by licensed firms.
Individuals? Patch your shit. Setup MFA that's not your cellphone.
Governments? ..... *Rodney_Dangerfield.gif
The real impact is on small and medium sized businesses who can’t afford to run their own SOC.
So now they’re forced to hire MSPs and outsource ALL their IT.
I wouldn't say forced. Most of them would pick the cheapest firm they can find in India that'll open up more holes than they fix