4 - Changing the threat paradigm

Abstract

The complexity of the technical environment creates a different kind of ecosystem within which security professionals function. In context to the physical world, discrete acts are visualized that are either discovered or not discovered, with an eventual understanding of the cause and effect. However, in the computer world there can be many combining factors involved in understanding the loss event. It is noted that it is often difficult to identify the exact cause. There are parallel scenarios in the physical world, as not all losses are discrete events. The point where physical and IT security risks connect or cross over in the organization is commonly referred to convergence point. It is essentially the area where the organization is often most vulnerable. The threat paradigm facing business has changed over the past few years. However, through security convergence, security groups can unify their security messages and deliver more cost-effective security controls in order to meet the security threat paradigm.