No Specific Answer to this question based on the day to day operation decides what threats are happening , what

going
on in to your infrastructure .. etc ,,,

 Did anyone make a change to production outside the change control process?
 Do any one of our hundreds, or thousands, of systems or applications contain a previously undisclosed
vulnerability?
 Have any of our employees decided to go rogue and use their access to steal from us?
 Did anyone innocently fall victim to a well-crafted and targeted social engineering message?

The possibilities are endless.

Effective Security Posture

2 Main Keys
1 - How Long between the Threat heats the Environment and Detection of that threat
2 - How long between the Detection of that Threat to Remediation of that Threat

Our Focus is to collapse this Time

Talos power the Entire cisco security Architecture so from there we have capabilities from network
side / Endpoint side / Cloud )to tie that architecture together

Talos is a global Threat Analytics capability that is looking Across all customer data , billions of
billions events everday , trillions of threats blocked every year and takes all that intelligence and
powers it over all infrastructure ( firewalls / Endpoints , web / email / … )

Security Trends

Cloud
IOT
Ransomware
Advance threat
Endpoint