DtSR Episode 513 - CSO Perspective on Security Fundamentals
Down the Security Rabbithole Podcast (DtSR)
00:00
What Is Good Enough for Vulnerability Management?
I would challenge anybody to ask a red team or you know if you have you're talking to a real threat after I hope you're not you know what is good enough. The most highly regulated spaces are saying well you know first if you even know your stuff then you got to find the long delays and take a month to patch your most critical stuff. In Dao we have a policy if you don't patch critical things in 72 hours you're not on the network anymore, that's 24 hours for some cases. Even after you patch we're going back and thread hunting to make sure during any window of exposure before patch up.
Transcript
Play full episode
