Security Experts:

Mark Hatton's picture

Mark Hatton

Mark Hatton is president and CEO of CORE Security. Prior to joining CORE, Hatton was president of North American operations for Sophos. He has held senior roles with companies ranging from venture capital-backed, early-stage software vendors to a Fortune 500 information technology services and distribution organization. Hatton holds an MBA from Boston University, Massachusetts and a BA Communication from Westfield State College, Massachusetts.

Recent articles by Mark Hatton

  • Despite the billions of dollars spent annually by government and private industry to protect their networks and critical data assets, the large majority of breaches can be tied directly to human error and/or a breakdown in protocol.
  • There is an old saying, that if you want to get ahead, don’t bring your boss problems, bring him or her solutions. The same can be said when it comes to investing in security solutions.
  • There is a term currently permeating the security industry that distracts everyone from the larger goals at hand of making networks safer, mitigating threats and protecting critical data. The term is hype.
  • One of the more interesting cyber security phenomenons I’ve witnessed recently is not only the willingness of CEOs to admit that their company has suffered a breach, but the enthusiasm in which they have shown in making the admission.
  • Critical infrastructure facilities are under constant attack, and continuously being probed for defensive weaknesses and access points. To complicate matters, facilities often don’t even recognize when they have been probed or if a weakness has been identified for future exploitation.
  • Many organizations continue to focus on “intelligence after the fact,” rather than applying their focus and investments on thwarting attacks before they happen.
  • In some companies, the CISO has taken on a Rodney Dangerfield like character in that: It gets no respect. And it probably won’t until both the corner office and the boardroom view security as a business risk issue rather than a technology issue.
  • When it comes to security, you can scan for vulnerabilities all day long and even convince yourself that you know where that threat is hiding, but until you’re able to capture, correlate and contextualize it, it means nothing.
  • It’s typical for IT to be heads-down, focused on the many threats coming from many directions. But it’s important to take a step back, evaluate what’s new, and how to best leverage it so that the C-suite takes notice.