Cyber Defense eMagazine March Edition for 2022

Critically, endpoint security only detects a threat once it is written to the file system, at which point a
network will likely have been compromised already. Further, it is not able to protect unmanaged devices,
while also harbouring a high chance of inundating the security operations centre (SOC) with too many
alerts.
In dealing with HEAT, prevention is the best policy. Not only can it help to alleviate pressures on
endpoints, but it can also make the already challenging lives of SOC teams much easier, creating a more
sustainable environment of investigation, escalation and resolution.
This shift begins with a thorough review of existing security policies. Those that still remain built around
a central policy pillar of detection and response need to be adapted and enhanced so they are fit for
purpose in the modern work environment.
A Zero Trust approach, backed by the Secure Access Service Edge (SASE) framework, which
feature key security technology components will cater to today’s remote and hybrid workforces. SASE
ensures security is built around users, core applications and company data at the edge by converging
connectivity and security stacks. No longer are security stacks on the outside looking in; they are
integrated within the cloud.
In the face of HEAT, organisations should focus on three key tenets to limit their susceptibility to these
types of attacks: shifting from a detection to a prevention mindset, stopping threats before they hit the
endpoint, and incorporating advanced anti-phishing and isolation capabilities.
For more information on HEAT: Too Hot to Handle.
About the Author
Jonathan Lee, Senior Product Manager, Menlo Security.
Jonathan Lee serves as a trusted advisor to enterprise customers,
and works closely with analysts and industry experts to identify
market needs and requirements, and establish Menlo Security as
a thought leader in the Secure Web Gateway (SWG) and Secure
Access Service Edge (SASE) space. Jonathan previously worked
for ProofPoint and Websense. As an industry expert, commentator
and speaker, Jonathan is well versed in data protection, threat
analysis, networking, Internet isolation technologies, and clouddelivered
security.
Jonathan can be reached online at @Menlosecurity and at our
company website: https://www.menlosecurity.com/
Cyber Defense eMagazine – March 2022 Edition 105
Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.