Rob Allen

Now we have the business that we're dealing with right now.

Screw those guys.

We didn't say that the control was stopping business.

I mean, a door having a lock is not stopping business.

Again, your metaphors are killing me, David.

Bring it on.

So I'm a gentleman, so I'm not going to disagree with you.

I'm not going to tell you you're wrong.

But you're wrong.

Controls can help and facilitate teams being lean.

Controls are not necessarily something that require constant management upkeep.

Yes, they should be reviewed from time to time.

But equally, I mean, a very simple example.

is the difference between proactive, what we do, basically application control, allow listing, et cetera, and detection and response.

Detection and response involves alerts, alerts

fatigue is a real problem.

It's a massive issue in cybersecurity.

That entire whack-a-mole or boy who cried wolf where you better hope to hell that your security teams check everything out, hope they don't miss the one thing that's really important versus proactive, basically blocking everything by default and working backwards from there.

One's a control, one's a response, and I would argue that the control requires far less management and far less work for a lean team like you have.

I did define it in that way.