I was asked recently by the head of a startup that’s providing security analytics to a large company how it could assess where there were gaps. It seemed lost in the various domains, actors, data repositories, applications, and infrastructure.
How to Assess the Security Maturity of an Enterprise (an EA’s PoV)