We’re growing tired of cagey answers after a breach. Every attack wasn’t sophisticated, complex, or unprecedented. Companies concerned about lawsuits and public image adopted an approach to suggest they weren’t at fault. It often devolves into “victim shaming.” Plenty of post-breach analysis suggesting all the things the victim company did wrong.
A new trend is emerging. Smaller companies are leading a more transparent effort to explain the breach. They share what happened. They provide details. They explain what they learned. They offer insight and provide confidence that it mattered.
It demonstrates the importance of detection and response. The companies that detect problems and respond appropriately gain favor. Minimally, they don’t seem to suffer.
It’s a new, welcome trend we need to encourage more of.