Inside the Minds of Startup Cybersecurity General Managers

• •enabling business productivity while delivering better security
• •full visibility and control over all activity
• •providing consistent security controls across infrastructure-agnostic environments (on-prem, cloud, containers)
• •enabling security without interfering with business operations or development cycles
• •simplifying and unifying network security with a platform-centric approach

+10 more PRO

• •updating dated infrastructure and policies is really hard
• •time gap between vulnerability announcement and patch deployment is too long
• •phishing, malware, and ransomware attacks growing at double and triple digit percentages
• •cost and poor user experience of traditional security methods (vdi)
• •cloud resources are one misconfiguration away from being world-readable and publicly exposed

+10 more PRO

• •40% of customers upgraded to newest firewall version (historical problem)
• •device posture checked every 90 seconds
• •speed of remediation - how quickly can you take corrective action
• •security posture (better state of security)
• •manual vs automated case handling ratio tracked daily via dashboard

+10 more PRO

• •risk-informed innovation: accept measured risk in cloud/hybrid adoption, then layer visibility to mitigate
• •context-layered control - combine user context, device context, location context, os context, process context into single policy engine
• •prevention vs detection/response split - organizations must invest in both control points (user, device, network, application) and threat detection
• •contextual judgment model: use ml to provide contextual facts and flags, but preserve human judgment for final decisions
• •consistency across devices: apply same security policies regardless of device type

+10 more PRO

• •manual processes attempting to monitor thousands of data events
• •lack of real-time threat intelligence integration into operations
• •inability to apply same security controls when workloads move between infrastructure types
• •assumptions about data safety without contextual monitoring evidence
• •attackers making model do things beyond its guard rails (prompt injection)

+10 more PRO