In this segment, we explore essential strategies for strengthening cybersecurity defenses, focusing on the importance of patching, device visibility, and continuous testing. By addressing vulnerabilities and maintaining up-to-date systems, organizations can enhance their security posture and mitigate potential risks effectively.



Here is the verbatim discussion:

And identifying making making sure that you keep up with the patching and and um maintaining the latest and greatest updates on all of your devices and also knowing where those devices are so um you know a lot of times what ends up happening um when I covered ransomware specifically uh as well as endpoint security and and um to ler extent on kind of the internet of things or iot side a lot of organizations just it was over 50% % of organizations didn't know the devices that they had in their environment and if you don't know that it's there and you don't know that there's a door or you know a device that's on your Network that has access to your um to effectively to your crown jewels and the the critical assets that you're trying to protect then you're completely in the blind you're in the dark um so that you know that's that's like the the best easy way to identify the areas where you need to improve and then around that you can actually take action so you can actually Implement uh and and Patch those systems and you can identify and and prioritize that effectively and actually build that into your your risk program now on this is more about ASM right the ASM providing of your infrastructure and and now Gartner is also calling it esm external attex surface management which gives you the full view of your complete digital Jesus not close enough is the answer so um really what it comes down to is um organizations like current state of the the market right now is organizations are really broken up into um kind of five different levels of maturity so it's it's really from zero all the way up to five um and and with that organizations that typically are in the continuous um security testing space and actually doing it on a continuous basis are the upper level five uh Arena and they typically have the budgets to support it ends up being Financial in healthare and to um you basically.



Identifying Weak Points and Prioritizing Patching: Experts emphasize the criticality of identifying weak points in network security and prioritizing patching efforts accordingly. By ensuring all devices are updated with the latest patches, organizations can reduce their attack surface and mitigate potential vulnerabilities.

Device Visibility: The discussion highlights the significance of knowing all devices on the network to effectively manage security risks. Many organizations struggle with device visibility, leaving them vulnerable to blind spots and potential security breaches. By maintaining a comprehensive inventory of devices, organizations can better protect their critical assets.

Continuous Security Testing: Experts delve into the importance of continuous security testing in enhancing cybersecurity resilience. Organizations at the highest maturity levels engage in continuous testing to validate their security measures effectively. By adopting a proactive approach to security validation, organizations can stay ahead of emerging threats and strengthen their defense capabilities.


Addressing vulnerabilities through patching, maintaining device visibility, and engaging in continuous security testing are crucial steps in bolstering cybersecurity defenses. By implementing these strategies, organizations can mitigate risks effectively and enhance their resilience against evolving cyber threats. This segment underscores the importance of proactive measures in safeguarding digital assets and maintaining a robust security posture in today's dynamic threat landscape.



Brad LaPorte a former army officer with extensive experience in cybersecurity, provides invaluable insights into the evolving landscape of digital threats. With a background in military operations, LaPorte witnessed firsthand the early stages of nation-state cyber attacks, laying the groundwork for his deep understanding of cybersecurity challenges. Through his journey, he has observed the transformation of defense tactics from traditional, labor-intensive methods to modern, cloud-based solutions. LaPorte's expertise offers a unique perspective on the intersection of technology, security, and the underground economy of cybercrime. In this discussion, he shares his experiences and analysis, shedding light on the complexities of cybersecurity in the digital age.


Bikash Barai is credited for several innovations in the domain of Network Security and Anti-Spam Technologies and has multiple patents in USPTO. Fortune recognized Bikash among India’s Top 40 Business Leaders under the age of 40 (Fortune 40-under-40).Bikash is also an active speaker and has spoken at various forums like TiE, RSA Conference USA, TEDx etc.

Earlier he founded iViZ an IDG Ventures-backed company that was later acquired by Cigital and now Synopsys. iViZ was the first company in the world to take Ethical Hacking (or Penetration Testing) to the cloud. 

E-mail me when people leave their comments –

You need to be a member of CISO Platform to add comments!

Join CISO Platform

CISO Platform

A global community of 5K+ Senior IT Security executives and 40K+ subscribers with the vision of meaningful collaboration, knowledge, and intelligence sharing to fight the growing cyber security threats.

Join CISO Community Share Your Knowledge (Post A Blog)



CISO Breakfast at BlackHat Las Vegas 2024!

  • Description:

    We are thrilled to invite you to the CISO Breakfast at BlackHat 2024. 

    CISOPlatform is a community partner for the event which is co-hosted by Silicon Valley Bank, Stage One, First Rays Venture Partners, Latham & Watkins.


    Event Details: 

    • Date: Thursday, August 8th,…
  • Created by: pritha
  • Tags: blackhat usa, las vegas, ciso breakfast, usa