Most experts agree cybersecurity is now so complex that managing it has become a security problem in itself.
This has happened gradually over the last 25 years, often for perfectly good reasons. Hackers targeted weaknesses in isolated systems such as email, office applications or Windows PCs and so it made perfect sense to protect them with dedicated layers of security.
The result has been tool and system sprawl as ever more layers have been needed to protect new technologies such as web applications, IoT, and mobile devices from a constant barrage of threats. One of the simplest ways to measure this phenomenon is to look at the number of security tools organizations use to protect themselves, which according to one recent estimate has reached 50-60 for medium-size organizations and north of 130 each for larger enterprises.
