That is how we all should think of security: as a way of helping our companies achieve their goals. Security managers have discovered some key considerations for ensuring that security measures align with business objectives:
Securing the perimeter isn't enough. Monitoring and controlling the movement of data on endpoints gives an organization tremendous protection, since most unauthorized uses of data are performed on those endpoints after they've already successfully attached to the network.
Identifying internal threats is as important as catching outsiders. Insiders account for 70 percent of confidential information breeches.
Periodic vulnerability assessments leave gaps. Since malicious behavior happens daily, complement your routine audits with technologies that monitor actions on endpoints.
Device protection is not endpoint security. Hardening an operating system, disabling a USB port, and locking down certain functions isn't enough. Securing the endpoint means monitoring and managing it.
A business-focused approach to security enables companies to use security as a way to help them achieve their goals. Identifying internal threats, eliminating vulnerabilities, making data more reliable, and spending less administrative time on correcting errors is good for business. Remember: Our job is not to secure the network, our job is to secure the business.
