5
zOperational
considerations
yTo
promote accountability, frequent and unannounced penetration testing
(“red-teaming”) is essential
yMis-configuration
is a leading cause of vulnerabilities; configuration tools
are “miserably inadequate” today
yOrganizations
must have actionable fallback plans for when a cyberattack occurs