How the Sony Data Breach Signals a Paradigm Shift in Cybersecurity - WSJ

Excerpt from a stark security reality check

"The lesson you can take away from this is you need to be in a position where you can detect when something bad happens and stop the bad guy before he accomplishes his mission, whether it’s stealing data, leaking data, destroying data, changing data, whatever the case is. If you’re a sufficiently interesting target, you will be breached. There is no company or organization in the world that can stop it, including the U.S. government. We’ve seen that. But you need to cut off the bad guys before they do what they came there to do.

Our current research shows the amount of dwell time—the amount of time a bad guy spends in your enterprise before somebody notices—is a median of 209 days. And two-thirds of the time, somebody else tells you—usually the FBI. We need to bring that way down."

How the Sony Data Breach Signals a Paradigm Shift in Cybersecurity - WSJ