Decoding the Cyber Attack Chain: Core Tactics and Defenses

You’ve probably heard the old cybersecurity cliché that attackers have to be right just once to be successful, while defenders have to be right all the time. In this episode we turn the concept on its head as we discuss the concept of the attack chain—and the opportunities it gives defenders to disrupt it.

Ryan Kalember, Executive Vice President of Cybersecurity Strategy at Proofpoint, joins host Brian Reed for an in-depth look at the modern attack chain. As Kalember explains, effective cybersecurity is not trying to secure every possible asset. Instead, it’s understanding that even in a technically secure environment, the “human factor” remains a major threat across the attack chain. That’s why addressing social engineering and human vulnerabilities is critical. Only by correlating disparate aspects of cybersecurity—especially when it comes to identity and user behavior—can organizations create a more holistic approach to security.

They also discuss:

• A useful framework of cybersecurity
• Which areas to address in regards to elimination vs. securing each asset
• Understanding the human element and social engineering

Resources mentioned:
Board Members Feel Good Yet Unprepared (Sept Blog)
Cybersecurity Awareness Hub from Proofpoint
Cybersecurity Awareness Kit