Ideas on Hector Herrerahttps://www.hectorherrera.pro/en/ideas/Recent content in Ideas on Hector HerreraHugoen-USFri, 07 Aug 2026 19:10:00 -0500More security tools do not mean more security capabilityhttps://www.hectorherrera.pro/en/ideas/more-security-tools-do-not-mean-more-security-capability/Fri, 07 Aug 2026 19:10:00 -0500https://www.hectorherrera.pro/en/ideas/more-security-tools-do-not-mean-more-security-capability/Technology can enable a capability, but the capability exists only when people, processes, decisions, controls, and evidence work together.A technically correct architecture can be a bad business decisionhttps://www.hectorherrera.pro/en/ideas/a-technically-correct-architecture-can-be-a-bad-business-decision/Fri, 07 Aug 2026 19:05:00 -0500https://www.hectorherrera.pro/en/ideas/a-technically-correct-architecture-can-be-a-bad-business-decision/Architecture quality depends on more than technology: operability, cost, skills, dependency, recovery, governance, and the real ability to sustain it also matter.Having 10,000 vulnerabilities does not mean having 10,000 prioritieshttps://www.hectorherrera.pro/en/ideas/having-10000-vulnerabilities-does-not-mean-having-10000-priorities/Fri, 07 Aug 2026 17:40:00 -0500https://www.hectorherrera.pro/en/ideas/having-10000-vulnerabilities-does-not-mean-having-10000-priorities/Vulnerability management creates value when it turns thousands of findings into a manageable number of decisions that can be executed, validated, and explained.What information is missing when a vulnerability only has a CVSS scorehttps://www.hectorherrera.pro/en/ideas/what-information-is-missing-when-a-vulnerability-only-has-cvss/Fri, 07 Aug 2026 17:30:00 -0500https://www.hectorherrera.pro/en/ideas/what-information-is-missing-when-a-vulnerability-only-has-cvss/A CVSS score can tell us a great deal about a vulnerability and very little about what an organization should do first.Incident response starts before the incidenthttps://www.hectorherrera.pro/en/ideas/incident-response-starts-before-the-incident/Fri, 07 Aug 2026 16:40:00 -0500https://www.hectorherrera.pro/en/ideas/incident-response-starts-before-the-incident/Response capability is built before the incident: by defining decisions, channels, scenarios, evidence, communications, and exercises that reduce unnecessary improvisation.An incident response plan nobody can execute is not really a planhttps://www.hectorherrera.pro/en/ideas/an-incident-response-plan-nobody-can-execute-is-not-really-a-plan/Fri, 07 Aug 2026 16:35:00 -0500https://www.hectorherrera.pro/en/ideas/an-incident-response-plan-nobody-can-execute-is-not-really-a-plan/A plan creates value when a team can activate it under pressure: people know who decides, what to record, what to preserve, how to escalate, and when to close.Email is not just a channel: it is an attack surface against critical business processeshttps://www.hectorherrera.pro/en/ideas/email-is-not-just-a-channel-attack-surface-critical-business-processes/Fri, 07 Aug 2026 15:20:00 -0500https://www.hectorherrera.pro/en/ideas/email-is-not-just-a-channel-attack-surface-critical-business-processes/A convincing email can alter a decision, capture credentials, or redirect a critical process without looking like a traditional attack.The most dangerous email attacks do not always carry malwarehttps://www.hectorherrera.pro/en/ideas/the-most-dangerous-email-attacks-do-not-always-carry-malware/Fri, 07 Aug 2026 15:10:00 -0500https://www.hectorherrera.pro/en/ideas/the-most-dangerous-email-attacks-do-not-always-carry-malware/Better detection is not simply more filtering: it is the ability to recognize when a message or interaction is trying to lead a user toward a dangerous decision.Prioritizing risk is not sorting vulnerabilitieshttps://www.hectorherrera.pro/en/ideas/prioritizing-risk-is-not-sorting-vulnerabilities/Fri, 07 Aug 2026 13:30:00 -0500https://www.hectorherrera.pro/en/ideas/prioritizing-risk-is-not-sorting-vulnerabilities/Good prioritization connects exposure, impact, context, and execution capacity; it is not just a technical ranking exercise.Resilience starts before the incidenthttps://www.hectorherrera.pro/en/ideas/resilience-starts-before-the-incident/Fri, 07 Aug 2026 13:20:00 -0500https://www.hectorherrera.pro/en/ideas/resilience-starts-before-the-incident/Responding well matters, but resilience depends on earlier decisions about capabilities, dependencies, recovery, and learning.Applied AI for cybersecurity: where it adds value without replacing judgmenthttps://www.hectorherrera.pro/en/ideas/applied-ai-cybersecurity-value-without-replacing-judgment/Fri, 07 Aug 2026 13:10:00 -0500https://www.hectorherrera.pro/en/ideas/applied-ai-cybersecurity-value-without-replacing-judgment/AI can reduce friction and enrich analysis, but its value depends on context, control, and the quality of the decisions it helps improve.