Andy Ellis

Trying to achieve perfection without focusing on the basics is a recipe for disaster.

So and ultimately, the approach is different for every company.

We talked about risk tolerance.

Everything like that is going to be different for every company.

So it's a different approach.

It doesn't have to be the exact same framework for everything.

You have to obsess over the table stakes.

We actually talked about this in a CISO roundtable a few weeks ago that I led.

And it's not sexy.

I mean, you talk about it, David, like it's not the cool new tool and it's not the new logo and things like that.

But the amount of companies that have been burned for not patching a legacy or an end of life server is most.

Yeah.

Right.

And so we talk about some of the things that companies get wrong.

You have to be continual on your patching.

You have to be wholesome.

You can't have these these scatomas and these dark areas that you just say, oh, those are the systems we don't patch.

Right.

Or those are the production systems we're scared of touching.

So.