Throwing money at security tools doesn't fix root causes

Throwing more money and tools at a problem that's not well understood is something I observed first hand many times.

• Understand the people, process and technology context

• Use less tools, better (aka training and time)

• Allocate time for continuous improvement

• LinkedIn post