Transcript

Coverage Analogy · CYBR.Signal

0:00
SPEAKER_00: And hello everybody.
0:01
SPEAKER_00: Happy Cyber Sunday.
0:03
SPEAKER_00: As you can see, I am not in Houston.
0:07
SPEAKER_00: I am in Michigan.
0:09
SPEAKER_00: And it's about 18 degrees out here.
0:11
SPEAKER_00: And yes, I decided to uh film a Cyber Sunday in the snow.
0:18
SPEAKER_00: So it kind of what it I like to make analogies.
0:21
SPEAKER_00: That's a big thing for me.
0:22
SPEAKER_00: And one of the analogies this kind of brought up for me in the snow.
0:28
SPEAKER_00: It kind of reminded me of the difference in like how Michigan deals with this and how Houston deals with this.
0:36
SPEAKER_00: If you don't know, I live in Houston most of the time.
0:39
SPEAKER_00: And we had temperatures just like this earlier this week, actually.
0:43
SPEAKER_00: So it wasn't uh that much colder here, isn't much colder here than it was in Houston.
0:48
SPEAKER_00: But we didn't have all the snow.
0:49
SPEAKER_00: We had a little bit of snow, a little bit of ice.
0:51
SPEAKER_00: And what happened in Houston a lot, especially around my house, um was that the uh traffic and everything kind of stopped.
0:59
SPEAKER_00: People quit going out, schools closed.
1:02
SPEAKER_00: You can't do that here in Michigan because this happens a lot.
1:07
SPEAKER_00: Um so things close down in Houston when the weather gets kind of bad, gets icy, that kind of thing.
1:13
SPEAKER_00: And they don't, it doesn't really do that here in Michigan and other places in the north because you can't, because it happens too much.
1:21
SPEAKER_00: So, and what I just said happens too much is kind of a clue, but part of the temptation or an analogy that is a temptation to use is that why don't you put more infrastructure in place in Houston to deal with this so you won't have to shut down on those days?
1:40
SPEAKER_00: And so the the analogy to that is well, you know, places you could have a um cybersecurity program that's not very good in one place in one company, and then in another company it's pretty robust, and that's just the direct analogy to you know, that place is gonna have a problem, the place who doesn't have a good robust security program is gonna have a problem when they get popped by somebody, and the other one will be just fine, or you know, better off and be able to be able to recover those kind of things.
2:14
SPEAKER_00: So that's a straight-up analogy that seems plausible when you first think about it, but actually it's not a very good analogy.
2:21
SPEAKER_00: And while I know I said I was gonna stay away from the whole risk assessment, not stay away from it, but just kind of wrap that up.
2:27
SPEAKER_00: This is I think this is appropriate to bring up as an analogy, is that Houston doesn't invest in that infrastructure and all that stuff to recover from ice and those kind of things.
2:37
SPEAKER_00: It doesn't invest as much because it doesn't happen there very often.
2:42
SPEAKER_00: It maybe happens once, twice a year at the very most.
2:46
SPEAKER_00: Yes, back in 2021, we had a really big thing happen.
2:50
SPEAKER_00: Um, and but that I mean, that's just so very seldom.
2:55
SPEAKER_00: It just doesn't happen a lot.
2:56
SPEAKER_00: It's not a very big occurrence here in Michigan and other places, happens a lot.
3:00
SPEAKER_00: You get a lot of snow.
3:01
SPEAKER_00: You have to invest in those things.
3:03
SPEAKER_00: All the roads here in Michigan as we were driving from the airport to out to here are completely clear, no ice on them whatsoever.
3:11
SPEAKER_00: I left my house the other day in Houston, there was ice on a bridge, like it was slowing everything down, and people just didn't know how to deal with it.
3:21
SPEAKER_00: So those are kind of your two different things.
3:24
SPEAKER_00: Same way with like houses.
3:26
SPEAKER_00: Um, here in Michigan, you know, you're not dripping the water during the during winter storms and stuff like that.
3:31
SPEAKER_00: I mean, you're covering things up, you're winterizing, but you're not doing all of the things because the houses are built to deal with that.
3:36
SPEAKER_00: You can see the snow coming down.
3:38
SPEAKER_00: It's pretty cool.
3:39
SPEAKER_00: Um, in Houston, you know, you have to open your cabinets and keep everything uh warm and make sure all your pipes are uh wrapped and you've got dripping.
3:50
SPEAKER_00: I mean, you know, there's different advice.
3:51
SPEAKER_00: I'm not trying to get into that.
3:52
SPEAKER_00: But essentially the the analogy is it doesn't happen there very often.
3:56
SPEAKER_00: The houses aren't built for it.
3:57
SPEAKER_00: And that's where the risk assessment analogy comes in, is that if you're putting a bunch of money and time and effort into an area into your organization where there's not a big chance of something happening in that uh in that area, like a you know, a website that just doesn't get pot very or doesn't have a lot to do with your organization's uh revenue, it just doesn't have a lot of value to it, and it's not a big risk.
4:24
SPEAKER_00: You've done a risk calculation there, you know that the likelihood of it getting hit is low, the the problems if it does get hit are low.
4:33
SPEAKER_00: Why put the time and effort into it?
4:35
SPEAKER_00: That's really more an apt analogy in my mind from a risk assessment and a cybersecurity perspective.
4:42
SPEAKER_00: When you look at Michigan investing in a lot of infrastructure to clear out their roads so they can keep moving, and Houston not doing that much.
4:50
SPEAKER_00: That's the analogy you need to take.
4:52
SPEAKER_00: Not that one is doing what it should and the other is not, because Houston just shouldn't put that.
4:59
SPEAKER_00: They can use that money and resources in other ways and do other things that are better for the use of the community.
5:06
SPEAKER_00: Anyway, so that's Cyber Sunday.
5:07
SPEAKER_00: Hope that makes sense.
5:08
SPEAKER_00: Let me know what you think, and I'm gonna get inside because I'm cool.
5:11
SPEAKER_00: Talk to you next time.