Elevating Cybersecurity Performance

Overview: Brett Galloway, CEO of AttackIQ, opens the second annual Purple Hats conference with a call to improve global security effectiveness through training, exercising, and threat-informed defense.

Key Topics: The military adage that amateurs talk strategy while professionals talk logistics; why security teams must train against known threats; MITRE ATT&CK as a common language for enterprise defense; and purple teaming methodology.

Technical Details: Galloway draws parallels between unprepared military forces and security teams that deploy tools without exercising defenses. He positions MITRE ATT&CK as enabling systematic communication about adversary behaviors.

Takeaways: Security effectiveness requires continuous exercise against real adversary behaviors, not just tool deployment. Purple teaming and threat-informed defense bridge the gap between detection capabilities and actual readiness.