
Jay Clauser
1
APPEARANCES
1
PODCASTS
012
DEC 30
JAN 6
JAN 13
JAN 20
JAN 27
FEB 3
FEB 10
FEB 17
FEB 24
MAR 3
MAR 10
MAR 17
MAR 24
MAR 31
APR 7
APR 14
APR 21
APR 28
MAY 5
MAY 12
MAY 19
MAY 26
JUN 2
JUN 9
JUN 16
JUN 23
JUN 30
JUL 7
JUL 14
JUL 21
JUL 28
AUG 4
AUG 11
AUG 18
AUG 25
SEP 1
SEP 8
SEP 15
SEP 22
SEP 29
OCT 6
OCT 13
OCT 20
OCT 27
NOV 3
NOV 10
NOV 17
NOV 24
DEC 1
DEC 8
DEC 15
DEC 22
DEC 29
JAN 5
JAN 12
JAN 19
JAN 26
FEB 2
FEB 9
FEB 16
FEB 23
MAR 2
MAR 9
MAR 16
MAR 23
MAR 30
APR 6
APR 13
APR 20
APR 27
MAY 4
MAY 11
MAY 18
MAY 25
JUN 1
JUN 8
JUN 15
JUN 22
JUN 29
JUL 6
JUL 13
JUL 20
JUL 27
AUG 3
AUG 10
AUG 17
AUG 24
AUG 31
SEP 7
SEP 14
SEP 21
SEP 28
OCT 5
OCT 12
OCT 19
OCT 26
NOV 2
NOV 9
Aug 25, 2026
The New Demands of Exposure Management with SCOOP Cyber, Brinqa and CI-Discern
16:40
17:04
17:16
17:48
S
16:29SteveHOST
Just for the audience, kind of what is that shift, and why is it needed and, you know, if you want to touch on what Brinca's doing about that, that would be great.

Jay ClauserGUEST
And, you know, Brinca's been, for a long time, have been tackling that initial problem you just mentioned of, you know, we need to apply context, both business, environmental, to, you know, for that great example at the end, right? A low vulnerability could be in our envir- in particular environment as, um, you know, important or introduce as much risk as a critical vulnerability sitting on an internal, uh, system that's in a segmented network.

Jay ClauserGUEST
You know, let's go, let's go address that low vulnerability that's externally exposed and exploitable, right? Like, that's the, that's the basis of a, I think a, a mature- Risk-based vulnerability management program.

Jay ClauserGUEST
But now we're starting to see, kind of as you mentioned, is, you know, what is exposure management? I mean, exposure management really is, you know, leveling that up to saying not only do we need to think about, you know, the vulnerabilities, but how do other, you know, areas of risk and exposure in our environment, um, correlate? And I think this is where the, the exposure management comes in, is how do I start to take into account misconfigurations on a particular, you know, system? Um, you know, maybe, you know, MFA got turned off on a system inadvertently.

Jay ClauserGUEST
You know, that's not necessarily CVE-based vulnerability, but it introduces risk.
7 MINS LATER
S
25:01SteveHOST
Um, so Jay, to, to give the audience, you know, a real world example, you know, talk about a case example, what Brinca did, and sort of how this actually works in a practical sense.