Tenable Blog

CISOs face an increasingly difficult responsibility to reduce risk and to ensure compliance. With cloud, mobile, and big data challenges, the dynamic IT landscape changes every day, potentially creating security gaps.

Adobe Flash has been in the press a lot recently after zero day vulnerabilities were disclosed. Facebook's CISO is calling for an end of life date, and Brian Krebs, the well-known infosec journalist (along with many others), is calling for everyone to uninstall the software. Flash has had major vulnerabilities in the past; everyone is used to seeing the almost daily popup from Adobe requesting an install of the latest version, so why all the sudden momentum?

Ever since personal computers have been populating businesses, security issues have skyrocketed. And infosec pros have been asking the same question in various forms: “What is the return on investment from all this security software?” and “Can we do without it, or do it cheaper?” To date, no one has come up with an appropriate ROI calculation, but we can answer the second question by developing a formula for how much an incident costs and comparing it to the cost of our security investments.

If you add more threat intelligence, are you providing better protection for your organization? Is this data useful without context? Just how much threat intelligence is too much?