This session will provide a roadmap for reducing risk in 2021. Preventing a breach in the coming year is going to be particularly difficult because most risk reduction strategies require significant increases in security spending, while analysts predict decreased security budgets. Using the MITRE ATT&CK framework, Netta will run through the anatomy of a modern attack to articulate this problem. Through this lens, she will explore the reasons why spending more doesn’t necessarily equate to stopping more attacks. More importantly, she will demonstrate some ways in which you can make impactful improvements to your security posture while managing to cut costs.