The brutal asymmetry of working in cybersecurity, according to CrowdStrike President @​MichaelSentonas: Defenders have to stop every attack while keeping their business running, while attackers' only job is to be successful once, no matter how many times they try. “[Defenders] have to get it right 100% of the time, but they also have to not stop business. It’s easy to get it right 100% if you turn off everything.” “And it’s not going to fly with the CEO of the company if every day the security technology is slowing people [down]. So there’s an added level of complexity.” “The defender has things like change control. The defender has things like regulatory guidelines and process that they need to follow. The attacker doesn’t care about any of that.” “You go to Europe where everyone is talking about AI laws and privacy and regulation. I said at a conference, ‘This is fantastic. You guys are leading the world in all of this regulation,’ and everyone was proud.” “The adversary does not care. They’re already breaking the law, so why would they follow it?” “And then you have the cost pressures. You can’t just pour everything into tokens. You can’t just pour everything into IT budget.” ▻