Capital One Breach Demands New Approach to Cybersecurity

In one of the largest data breaches ever, Capital One admitted recently that more than 100 million customer records were compromised. It is not particularly surprising that a skilled cybercriminal was once again able to extract what should have been well-protected customer information.

The knee jerk reaction for most enterprises will likely be more frequent pentesting, tightening up vulnerability assessments and adding to the perimeter defense toy chest. All of that is good, but we arrived here for a reason, and this dire situation is not going to correct itself with more of the same.

Lumu has developed a new strategy, and we’re helping businesses shift to a completely new approach, one that flips the premise that your data is secure and instead assumes that you are compromised.

Here are a few of our guiding principles to detect and stop breaches with speed:

• Assume you are compromised. While pentesting and vulnerability assessments are fundamental to any security testing strategy, we’re past the point where they are sufficient. Organizations must embrace the hypothesis that adversaries might already be inside. Doing this exercise once is great and will surely make an impact, not only with anxiety levels but also with post-breach resource and budget planning. Doing it continuously by implementing the concept of continuous compromise detection will become the gold standard and anchor of cyber-resilience in today’s world.
  
  
• Unlock the value of your network data to identify compromise at speed. In every attack, adversaries must have access to your network. This means that listening actively and continuously to what your network has to tell you will reveal the compromise level of your organization. The extended definition of the network in today’s world includes on-premises environments, hybrid networks, and roaming devices.
  
  
• Streamline the process of data collection to illumination. Easier said than done, and where most enterprises may fall short. It is absolutely critical to capture all relevant data with a process that is simple, timely, reliable and continuous. There will never be a proper assessment for any given incident if you are not capturing all the data. Lumu helps you go from collection to continuous and complete illumination.