- Person Name: Scott Davis
Scott Davis
"You can't protect what you don't know"
Today is Groundhog Day, since 1887, it is the one day a year where we rely on a Groundhog named Punxsutawney Phil, to forecast the next six weeks of our lives. In today’s case the forecast calls for 6-more weeks of Winter.
In 1993, the movie Groundhog Day was released where Bill Murray gets trapped in a time loop reliving this Pennsylvania Dutch superstition that a groundhog’s shadow on February 2nd predicts how long winter will last.
As I sit here and watch the movie, I’m thinking about technology and how so many of us repeat the same thing over and over because it’s simply how we’ve always had success in completing the task. Right or wrong, it gets the job done and until an issue arises technicians are creatures of habit.
With Cybersecurity there are two things the threat actors love, First End Users and Second is technicians that haven’t changed their ways. End users will always be our weakest link, but when you look in the mirror you are also an end user. If you refuse to listen and learn then you will eventually doom yourself as technology changes, so we have to as well.
From the ground to the cloud, the configurations and setups that we complete have to not only work today, but also keep your data secure years from now.
The best way to snap out of the Groundhog Day loop is to complete a security audit for your organization. You don’t have to complete a full Pentest or spend tens of thousands to get a baseline understanding of where your organization stands and a gameplan on steps you can take to fix it.
You should never have your current IT team or vendor complete the audit as they will simply continue their same habits and keep it within the box. The Cybersecurity Association of Pennsylvania’s Cyber Calvary looks outside those boxes and bring in a trusted source that can give you and your current security team the information they need to open their eyes, better secure your data, and finally wake up to February 3rd.
Scott Davis
"You can't protect what you don't know"