)
)
)
Summary
Security can't answer every request with no. Rich Casselberry, VP of IT Security at ATI, says you either offer a safer path to what someone wants or you make the trade-offs explicit. He did exactly that when finance asked to cut an EDR tool that had stopped 11 ransomware attacks in a year. The principle comes from his paper, The CISO Blueprint, on building strong security from strong IT practices, which he discusses with host Jason Kikta. Casselberry also pushes for deliberate automation. With 90% of his systems patching on their own, his team can stop reacting to every headline vulnerability and spend its time where humans add value.
)
)
)