Black Hat USA 2025: Policy compliance and the myth of the silver bullet

If you put a group of CISOs in a room, they are all likely to wait for one of them to declare they have the answer, the silver bullet, that solves the issue of the day. In reality, however, what needs to happen is that all the CISOs combined have a fragment of the answer and need to piece them together to create the answer to the issue.

The above was a comment from a policy panel at Black Hat USA 2025. The comment has merit, as no single vendor, service provider, individual or another entity can resolve the cybersecurity conundrum. It truly is a team sport that requires all those involved to play an active role.

The issue is breaking down the barriers of sharing that may exist between companies that could be competitors. In physical security situations, companies do share information; for example, in retail, it’s common ...