IT Brew // Morning Brew // Update

CYBERSECURITY

Amelia Kinsinger

Like your dad’s travel itinerary, threat intel has a lot of extra detail that you probably don’t need. Even ransomware defenders have their own version of TMI.

During a recent IT Brew event, “Trend Watch: The Latest in Ransomware and What That Means for IT Teams,” an attendee asked Grant Smith, president of Phantom Security Group: “At what point does threat intelligence become noise? We’re drowning in alerts, and I’m not sure our team knows what to escalate anymore.”

Smith advised companies to learn about the groups targeting companies in their sector, research their tactics, and then ensure defenses cover the areas those groups are targeting.

“You really have to filter out the information based on the market segment that you’re in,” he told the attendees.

After the event, we posed the same question to other security pros, who shared how to turn down the noise and make the most of all that data.

Tie the intel to your environment.—BH

☕ TMI! TMI!