Is Cybersecurity Simpler Than People Make It Seem?

The author, with 10 years of experience in the field, observes that organizations, regardless of their size, often fail to implement well-known fundamental cybersecurity controls present in standards/frameworks. Instead, cybersecurity functions focus on more advanced concepts and defenses, making basic security more complex than it needs to be. The author compares this to other environments like aerospace, automotive, and construction, where safety has been successfully implemented for decades despite the presence of adversarial actors.