The very tools designed to protect the security of an organization may present the greatest cybersecurity threat. Credit: Delmaine Donson In a recent article , we discussed the connection between digital transformation, innovation, and rising IT complexity. And we noted that complexity presents a big challenge to cybersecurity teams. Nevertheless, organizations have armed themselves with a litany of best-of-breed tools to tackle their most pressing security challenges. Many large enterprises use upwards of 40 to 50 tools — all best-of-breed point solutions. This is tool proliferation in the extreme — popularly known as “tool sprawl.” Bradley Schaufenbuel, the CISO of Paychex, a provider of payroll services for small businesses, says “tool sprawl” has become a major concern for IT and security teams. His own team finds new vulnerabilities from rogue software every day. If that software is not regularly updated, the attack surface grows exponentially. “Unless the tools are sanctioned and inventoried, security teams are often unaware of their existence,” explains Schaufenbuel. “And a security team cannot secure what it doesn’t know exists.” They cannot secure it; they cannot effectively manage it; and they cannot control the spiraling costs of maintaining a mismatched portfolio of security tools with overlapping […]