BMO's Marson: Information Security Demands Processes As Well As Tools

"In the security space, there are tons of different vendors and it really is not about implementing a tool," Marson said. "You can have a tool that will essentially do anything ─ but what I'd like to propose is that it's not about the tool; it's about the associated processes involved with that tool. For example, it's no good to identify vulnerabilities on your systems if you have no method with which to remediate those vulnerabilities. You need to have people looking at those vulnerabilities