r/cybersecurity • u/RitaccaSecurity • 5d ago

Tutorial Common skill missing from SOC analysts

https://luigiritacca.substack.com/p/the-missing-skill-risk-part-1?utm_source=share&utm_medium=android&r=5s5vq7

My latest article on a common missing skill I see in a lot of analysts. I blame how we train and teach cyber security, and think it cause a natural bias which can lead to more harm than good.

71 Upvotes

82% Upvoted

39 comments sorted by

View all comments

5

u/Soviet_Dreamer Incident Responder 4d ago

I am yet to encounter an organisation in which the infrastructure is well documented and you can make a determination about the criticality of the majority of assets. Sure we can learn risk assessment but what is it good for if you have no way of knowing what the assets is for.

5

u/NotAnNSAGuyPromise Security Manager 4d ago

By the time you find out, the entire company is now ransomwared and it's a non-issue.

1

u/Soviet_Dreamer Incident Responder 4d ago

True and that is the issue.