Brent Deterding, a security vendor, joins the podcast to discuss managing vendors in the cybersecurity industry. They share personal experiences and challenges, emphasize the importance of learning AI, and offer strategies for maximizing value in vendor relationships. They also discuss the coolest technology and consider how time may shape perspectives.
Building productive and valuable vendor partnerships requires implementing a screening function and setting specific timeframes for vendor meetings.
Focusing on outcomes, tangible benefits, and simplicity in vendor relationships can help organizations achieve significant risk reduction and efficiency.
Deep dives
Managing Vendors and Living with Them
In this episode, the hosts discuss the importance of managing vendors and living with them in the security industry. They emphasize the need for vendors to treat customers as human beings, be honest, and not waste their time. The hosts highlight the value of implementing a screening function to filter out unnecessary vendor interactions. They recommend setting specific timeframes for vendor meetings and sticking to them. Additionally, the hosts mention the significance of focusing on simple and cost-effective solutions that provide significant risk reduction rather than getting overwhelmed by complex and unnecessary features. They stress the importance of aligning tools with business needs and enabling the organization's growth and efficiency.
The Shifting Dynamics of the Security Market
The episode explores how the security market is changing and evolving. The hosts discuss how budgets for security are shrinking or remaining stagnant in many organizations, emphasizing the need for vendors to demonstrate the value of their products and services. They highlight the importance of focusing on outcomes and tangible benefits rather than features and speed. The hosts discuss the concept of the economy of features, where many companies offer solutions that are essentially variations of the same problem. They encourage vendors to understand how their offerings enable businesses, prevent financial losses, increase efficiency, and reduce risk. The hosts also touch on the shift towards viewing security as a part of the overall business strategy rather than a separate silo.
Implementing a Screening Function for Vendors
The hosts advise implementing a screening function to effectively manage vendors. They recommend defining basic rules for vendor interactions, such as treating customers with respect, being transparent, and not wasting their time. They highlight the importance of filtering out marketing emails and focusing on personalized outreach that shows genuine interest in the customer's needs. The hosts also discuss setting specific timeframes for vendor meetings to manage time effectively. They emphasize the value of extreme focus and prioritizing simplicity in vendor relationships and purchases. By implementing a screening function, organizations can establish productive and valuable vendor partnerships.
The Power of Platforms and Prioritizing Basic Security Measures
The episode delves into the value of platforms in security solutions. The hosts discuss the benefits of platforms in providing an interconnected ecosystem of tools that work together seamlessly to solve security problems. They acknowledge that while platforms can be powerful, they are not without shortcomings, such as the lack of standardization and interoperability among different vendors. The hosts also highlight the importance of prioritizing basic security measures, such as multi-factor authentication, device posture management, and external vulnerability patching. They emphasize that by focusing on these fundamental measures, organizations can achieve significant risk reduction and minimize the need for complex and unnecessary tools.
TL;DR Working with security vendors is tough - and it's not getting better. Market consolidation, product maturity, innovation - all of that has to be factored in to develop a strategy and deal with the constant change. Whatever your current strategy - Brent, Rafal, and James discuss some options and how it could be.