The way Randy Raw explains it, until that day when money for cybersecurity grows on trees, security leaders must frequently examine where limited resources are going.
Raw is Vice President of Information Security at Veterans United Home Loans.
“We’re competing with other people [departments] to get money, to protect what we have... so we really want to be effective at where we spend."
Raw presented a session called "Are You Spending Your InfoSec Dollars in the Right Place?" at the SecureWorld regional cybersecurity conference in Kansas City.
He says his team has used the cyber kill chain methodology to map out the organization's cybersecurity spending.
“Do we already have a solution in place that is sufficient? Is it working? Can we augment that or do we just have a hole?"
For more specifics, check out our interview with Raw: