The billion dollars of subsidised access buys detection. It does not buy the patching capacity that detection now demands, and the maintainers who triage the findings are the same unfunded volunteers. For a CII operator the gap appears as a disclosure it cannot verify against its own estate.
The billion dollars of subsidised access buys detection. It does not buy the patching capacity that detection now demands, and the maintainers who triage the findings are the same unfunded volunteers. For a CII operator the gap appears as a disclosure it cannot verify against its own estate.