Strong fundamentals make next-gen security possible
A former CISO for Hyatt and United Airlines argues foundational controls—asset inventory, identity, resilience—outperform repeatedly buying new security tools.
The author, a former security leader at Hyatt and United Airlines, argues that mastering foundational controls delivers more impact than cycling through expensive new tools. The piece highlights asset discovery with a single source of truth, identity hardening via MFA and passkeys, and risk-based prioritization using frameworks like CIS CSC. It also stresses resilience and recovery planning, including secure backups and regularly practiced incident processes.
- Asset discovery and a maintained single-source-of-truth inventory are the first foundational control.
- MFA cuts account compromise odds by 99%; passkeys add effectiveness while reducing friction.
- Risk appetite, crown-jewel prioritization, and frameworks like CIS CSC guide right-sized security spend.
- Resilience and recovery, including secure backups and practiced processes, must match prevention efforts.
- Vendors
- HyattUnited AirlinesCIS
- Products
- CIS Critical Security Controls
- Organizations
- HyattUnited Airlines
From the original article
5 min read at csoonline.com
Risk management has always been a difficult job, but the current threat landscape has taken the challenge to a new level. I’ve spent years leading cybersecurity efforts at large enterprises, including Hyatt and United Airlines, and in that time I’ve seen cybercriminals grow increasingly creative, leveraging innovative tactics and technology to further their efforts.
csoonline.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.