Why runtime security should be a top priority for CISOs

Occasionally, you get exposed to something so logical that you literally take pause and smile quizzically asking yourself "Why didn't I think of this before?" I have had this reaction on several occasions. This happened when I read Sounil Yu's Cyber Defense Matrix and the logical way that it provided actionable insights on how to use the NIST Cybersecurity Framework across different asset classes (e.g., applications, data, networks, users, and devices). Sounil's approach just made sense and, as a CISO, we need things that make sense and are actionable. Ours is a noisy profession…