Without naming names, can you share a Red Team story that changed the way you think about security and surprised you even?

Yes.

So this is actually from much earlier in my career.

This was less of a Red Team exercise, although it might as well have been based on the scope.

I was working with a company that is very heavily involved in making... big pieces of metal for things like bridges and buildings, very big buildings.

And I was naive enough at this point to think that surely because they made so much money and they had such a big building and so many customers that they would have taken the A lot of things, seriously.

I walked in there on the first day thinking this is going to be an abject failure.

Looking ahead, what concerns you most about the next few years of cybersecurity and what gives you the most optimism?