Infosec is Sick - Addressing the Failures in Information Security

Explore the critical issues plaguing the information security industry in this thought-provoking 46-minute conference talk by Robert Hansen at LASCON. Delve into the reasons behind infosec's failure to effectively mitigate risks, as evidenced by the insurance industry's significant losses on cyber insurance claims. Examine the lack of proper tooling for risk mitigation, the widespread misunderstanding of risk measurement, and the growing disconnect between executives and infosec leadership. Gain insights into potential solutions and strategies to address these challenges and improve the overall effectiveness of information security practices.