On Cypartan’s Dilemma

In our dynamic cyber threat landscape, info/ cybersec personnel engage everyday with enemies who seek to harm those we wish to protect. Few in number against staggering odds, outmanned and outgunned with limited resources, we must be right one-hundred percent of the time, whilst the enemy needs only to be right once. This is the Cypartan Dilemma.

On Internal Mapping (3)

Dataset layers are the foundational pieces of building the organisation's map, as without them the map can't be complete. Preferably driven by automated ingests, there are layers likely manually curated - giving greater visibility to broader operations. In tracing the often-understood, rarely-captured components of an organisation - their processes and interdependencies - we need people able to follow paths from start to finish adding the layer to the mix.

On Internal Mapping (2)

Challenges abound when you look to create the sportscards for entities (the context is here). An entity's card is a listing of all the directly-associated, definable information we have data for. Trouble often is, we don't know what we don't know - perhaps you've ideas of what should include, but as more datasets are uncovered or created you may find other elements clearly defining an entity needing included. The point is remain flexible in creating the entity cards, but make certain you aren't mixing two entities in a single card.

On Internal Mapping (1)

If a picture is worth a thousand words, what does it look like when we consolidate a thousand logs? In many organisations, there are many disparate data sets acting as pieces of the organisation's puzzle. An excellent analogy to the approach - you may have an idea of the whole picture (it's on the box) but you don't really appreciate it until you start looking at the pieces. In this each dataset is an additional piece, by taking each piece, mining the relevant parts and how they relate to the whole picture, the organisation gains incremental understanding of not only the value held by the dataset, but where it fits in the greater picture.