Guest blog by David Spark, Spark Media Solutions
“If we’re talking say software defined networking we need software defined security,” said Pete Lindstrom (@ITsecurity_IDC), VP, Security Strategies,IDC. “Coming up with tools and technologies that align with this agility is incredibly important.”
In our conversation at the 2016 RSA Conference in San Francisco, Lindstrom and I talked about the business moving ahead of security and embracing agile IT before security does.
“Many times security folks are afraid of the new technology and we want to crawl back into our little hole,” said Lindstrom. “But we can’t do that today because the world is going to move on without us. It’s time for us, if not take the lead, be there with the leaders…The thing that makes IT security architecture agile is being dynamic with our integrity.”
Eventually our conversation trended towards a discussion of microsegmentation, to which Lindstrom suggested that instead of developing tired perimeter-based security that no longer works, focus on centralized management with decentralized execution. Ultimately, he said you need to get a handle on your data and a better idea of the users that are accessing your systems.