Frankly Speaking 9/13/22 - Most security reports suck... and how security can deliver value.

Disclaimer: Opinions expressed are solely my own and do not express the views or opinions of my employer or any other entities with which I am affiliated.

Two personal plugs! First, we are looking to hire a senior engineering manager for my team. If you know anyone who is interested, please reach out to me, and I can tell them why working at dbt Labs with me is awesome!

Second, I will be speaking at this LinkedIn webinar on Wednesday 9/14 at 10 am PT on what I believe is the future of security engineering with the CEO of one of my former portfolio companies, Appdome. Please join! I will also write a follow-up blog post about our conversation.

LET’S BE FRANK

A lot of traditional security practices have been on my mind, and I’ve been thinking more about how to scale them effectively. One of my biggest irritations is security reporting. Too many times, I’ve seen security teams justify their existence by showing off their long reports even though most of the contents don’t have proper context, making them feel irrelevant.

In this newsletter, I’ll talk about the following:

• Why current reporting is outdated and creates friction

• How security teams can use these reports and provide value

• How security tools can fix their reporting

Current security reports are obnoxious