Why businesses are hesitant to enable security settings
Security alerts often sit in queues because teams need proof that changes won't disrupt applications. A recent white paper shows 47% of organizations keep less than 50% protection enablement active due to false-positive
Security alerts often sit in queues because teams need proof that changes won't disrupt applications.
A recent white paper shows 47% of organizations keep less than 50% protection enablement active due to false-positive concerns.
Explore how structured observation, testing, and controlled remediation workflows help balance operational continuity with security.
These hesitations are practical, as a security setting could block normal traffic or affect essential functions. To overcome this hurdle, a new approach proposes the process of secure remediation, which tests proposed actions in business environments, implements the change, and confirms the result.
How protected are the organisms?
According to a report by Check Point titled Safe Remediation: Confident Remediation in Production, 47% of organizations surveyed had less than 50% protection activation. Many capabilities remain inactive or set to observation mode only because teams are concerned about false alarms and business continuity.
The four stages of the process
The proposed method is based on four stages: observation, proof, action and confirmation.
- Observation: It leverages data already produced by IT and security systems, such as vulnerability findings and usage data.
- Evidence: Teams evaluate potential false alarms and performance before moving forward with prevention.
- Action: Organizations can require mechanical approval of changes or allow for automatic execution through configured workflows.
- Confirmation: The final result of the changes is checked.
Dealing with delays
While installing updates is still necessary, time-consuming testing schedules can delay patches from reaching production. During this waiting period, existing network protections can help block paths used in attacks.
โณ
READ ALSO
HACKS.GR / RELATED
Cyber โโAttacks & Data Breaches
Discord public messages will appear on Google starting November 16th
โ
Organizations that implemented the method recorded a 99.5% success rate in remediation actions. At the same time, the protections that were activated blocked 703.56 million attacks within a month, of which 21 million were recorded within 24 hours.
G
HACKS.GR / GOOGLE SEARCH
Hacks.gr on Google
Set Hacks.gr as a preferred source.
Preferred source
โ
end of article
Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes โ full credit and traffic to the original publisher.