Chasing a moving target
North acknowledged that the industry is still responding reactively to threats, a position largely dictated by the nature of the risk. “Threat actors are constantly developing new schemes, new methods of attack. And the reality is they only have to get it right once,” she said. “Meanwhile, the good guys, or security controls, have to be 100% perfectly secure, otherwise, they’re vulnerable. And that’s a big ask.”