--- title: "Cyber security systems: why holistic solutions are needed" description: How to abandon siled approaches, contingent on emergency, to evolve IT security systems towards a holistic approach. image: https://blog.cyberoo.com/hubfs/holistic%20solutions%20Blog%20Cyberoo.png --- - Solutions Cyber Security Suite - [What is the Cyber Security Suite?](https://cyberoo.com/en/cyber-security-suite/) - [Cypeer – Internal Security](https://cyberoo.com/en/cypeer-managed-detection-and-response/) - [CSI – Cyber Threat Intelligence](https://cyberoo.com/en/cyber-threat-intelligence/) Cybersecurity Advisory - [Incident response](https://cyberoo.com/en/incident-response/) - [Risk Assessment](https://cyberoo.com/en/risk-assessment/) - [VA/PT](https://cyberoo.com/en/vulnerability-assessment-penetration-test/) - [Cyber Security Advisory & VCISO](https://cyberoo.com/en/cyber-security-advisory-vciso/) Titaan Suite - [Titaan Neemesi – GDPR compliance](https://cyberoo.com/en/titaan-neemesi-gdpr-compliance/) Security Awareness - [KEATRIX – Human Risk & Security Training Platform for Business](https://cyberoo.com/en/keatrix-security-awareness-platform-business/) - Corporate Cyberoo - [Company](https://cyberoo.com/en/cybersecurity-company/) - [Certifications](https://cyberoo.com/en/certifications/) - [People](https://cyberoo.com/en/people-in-cybersecurity/) - [Above The Rest](https://cyberoo.com/en/above-the-rest/) - [Jobs](https://cyberoo.com/en/jobs/) Investors - [Investors relations](https://cyberoo.com/en/investors-relations/) - [Sustainability](https://cyberoo.com/en/sustainability/) - Resources - [Cyber Blog](https://blog.cyberoo.com/en) - [Tech Blog](https://cert.cyberoo.com/en/) - [Press News](https://cyberoo.com/en/news-press/) - [Media Kit](https://cyberoo.com/en/media-kit/) [![Cyberoo](https://blog.cyberoo.com/hubfs/raw_assets/public/Cyberoo_May2023/images/CYBEROO-logo.svg)](https://cyberoo.com/en/) - [Contacts](https://cyberoo.com/contacts/) - [English](https://blog.cyberoo.com/en) - [Italiano](https://blog.cyberoo.com/) - [Français](https://cyberoo.com/fr/) - [Deutsch](https://cyberoo.com/de/) - [Polski](https://blog.cyberoo.com/pl) - [Español](https://cyberoo.com/es/) - Solutions - Cyber Security Suite - [What is the Cyber Security Suite?](https://cyberoo.com/en/cyber-security-suite/) - [Cypeer – Internal Security](https://cyberoo.com/en/cypeer-managed-detection-and-response/) - [CSI – Cyber Threat Intelligence](https://cyberoo.com/en/cyber-threat-intelligence/) - Cybersecurity Advisory - [Incident response](https://cyberoo.com/en/incident-response/) - [Risk Assessment](https://cyberoo.com/en/risk-assessment/) - [VA/PT](https://cyberoo.com/en/vulnerability-assessment-penetration-test/) - [Cyber Security Advisory & VCISO](https://cyberoo.com/en/cyber-security-advisory-vciso/) - Titaan Suite - [Titaan Neemesi – GDPR compliance](https://cyberoo.com/en/titaan-neemesi-gdpr-compliance/) - Security Awareness - [KEATRIX – Human Risk & Security Training Platform for Business](https://cyberoo.com/en/keatrix-security-awareness-platform-business/) - Corporate - Cyberoo - [Company](https://cyberoo.com/en/cybersecurity-company/) - [Certifications](https://cyberoo.com/en/certifications/) - [People](https://cyberoo.com/en/people-in-cybersecurity/) - [Above The Rest](https://cyberoo.com/en/above-the-rest/) - [Jobs](https://cyberoo.com/en/jobs/) - Investors - [Investors relations](https://cyberoo.com/en/investors-relations/) - [Sustainability](https://cyberoo.com/en/sustainability/) - Resources - [Cyber Blog](https://blog.cyberoo.com/en) - [Tech Blog](https://cert.cyberoo.com/en/) - [Press News](https://cyberoo.com/en/news-press/) - [Media Kit](https://cyberoo.com/en/media-kit/) - [Contacts](https://cyberoo.com/contacts/) - [English](https://blog.cyberoo.com/en) - [Italiano](https://blog.cyberoo.com/) - [Français](https://cyberoo.com/fr/) - [Deutsch](https://cyberoo.com/de/) - [Polski](https://blog.cyberoo.com/pl) - [Español](https://cyberoo.com/es/) - - - - - ![](https://blog.cyberoo.com/hubfs/holistic%20solutions%20Blog%20Cyberoo.png) # Cyber security systems: why holistic solutions are needed Published by [cyberoo-admin](https://blog.cyberoo.com/en/author/cyberoo-admin) on 5 August 2021 Cyber security systems are now not only required to protect and defend against digital intrusions, but also to help enable the business. In fact, cyber security, designed to continuously monitor digital systems and implemented to immediately identify a breach and to contain and resolve a cyber incident, significantly helps with the operational continuity of company systems that support the business. ## **The mistake of cyber security systems in silos** The technological development of cyber systems has caused a parallel development over time of cyber security systems: firewalls, gateways, antivirus, anti-spyware, honeypots, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Data Loss Prevention systems (DLP), deep packet inspection systems, traffic filtering, encryption systems, Back Up management systems, sandboxes, advanced malware protection, next-gen firewalls, authentication systems, tokens, etc. However, it is rare that all these systems are managed by the same people and they are often connected to the same computer system at different times and with different management goals. All of these solutions form a cascade of information to be governed and protected, and serves as a potential extension of the attack surface, precisely because each individual piece of technology becomes part of the computer system that it is called to protect. This type of security approach is called “a puzzle”, because it grows opportunistically according to requirements and develops in every direction, rather than in a structured way. The same applies for systems that grow in silos, or separate compartments, where every environment has its own management and policy rules. The silo set-up emphasizes the approach, looking at it from the point of view of the architectural layers involved. ## **The next step towards a holistic model of cyber security systems** The most immediate consequence of the varied introduction of cyber security systems causes a huge variety of approaches and degrees of maturity. This situation usually culminates in a moment of such unmanageable chaos that you need to streamline and centralize. To do this, you have to evolve towards a unique approach which, however, helps retain the individual features of the respective tools so they remain interoperable, but connected to unique policies and procedures that are different yet coherent, complementary and correlated. In these cases, we are talking about evolving towards a holistic model, i.e. collaboratively developing an approach to combating threats, including the organizational framework and supporting integration and cooperation on every level, whether digital, logical or physical. In this sense, we are also talking about the convergence of the system’s entire architecture. Giulio Iucci, president of ANIE Sicurezza, explains that “convergence is now a ‘systemic’ reality; everything is connected, just like one single large organism. The approach to cyber security must therefore be holistic, global and just as systemic”. The critical infrastructure no longer just governs and enables essential services for the population. In some ways, a critical infrastructure is also a set of computer systems, including cyber security systems which, for each individual company, allow business activities and operations. Giulio Iucci continued “In the past, there were critical infrastructures. Nowadays, everything has become critical, from the point of view of hi-tech security. The intervention and action logic is completely changing for them. There is no longer the ‘periphery’ of the network, the fringe and second level of the system. It is all central and primary, and this brings a new logic of vulnerability. The fundamental point for building security is therefore the entire system architecture and the holistic vision of everything”. Security methods are also changing and while before cyber security systems were set according to the “action and reaction” model, nowadays Command and Control requires preventive intervention based on system monitoring, data interception, correlation and analysis. This enables Early Warnings and requires, downstream of the incident management process, the introduction of a weakness review to introduce corrective measures aimed at continuous improvement. In this sense, the adoption of a certification framework such as ISO 27001 (based on the Deming cycle of Plan-Do-Check-Act) and/or the NIST Framework can help in the transition from an old-style model of introducing cyber security systems to the new set-up. It is therefore about switching from traditional “contingency” management for security to a strategic, comprehensive view of protection. Starting from a threat assessment that is not generic but rather specific to your organization, specific risks can be associated by using a Threat Model, and for each one, company processes, security measures and cyber security systems are organized and governed using a synergistic approach. This involves a holistic approach: a global, strategic view of cyber security systems as part of the more general organization of digital systems to support the business. [Back to Blog](https://blog.cyberoo.com/en) - [Tweet](https://twitter.com/share) ## Related Articles ## [Continuous Threat Exposure Management (CTEM) to reduce data breaches](https://blog.cyberoo.com/en/continuous-threat-exposure-management-ctem-to-reduce-data-breaches) Companies are embracing digital transformation at an accelerating pace. Therefore, managing the... [Read More](https://blog.cyberoo.com/en/continuous-threat-exposure-management-ctem-to-reduce-data-breaches) ## [3 top cybersecurity trends according to Gartner: the overview](https://blog.cyberoo.com/en/3-top-trend-in-cybersecurity-according-to-gartner) More than ever, companies are being called upon to radically change their approach to cybersecurity... [Read More](https://blog.cyberoo.com/en/3-top-trend-in-cybersecurity-according-to-gartner) ## [Intrusion Detection System: the importance of continuous monitoring](https://blog.cyberoo.com/en/intrusion-detection-system-the-importance-of-continuous-monitoring) Protecting corporate systems and infrastructure from intrusions is one of the crucial elements in... [Read More](https://blog.cyberoo.com/en/intrusion-detection-system-the-importance-of-continuous-monitoring) [![Cyberoo](https://blog.cyberoo.com/hubfs/raw_assets/public/Cyberoo_May2023/images/CYBEROO-logo.svg "Cyberoo")](https://blog.cyberoo.com/) **TRUSTED BY USERS** [![Capterra](https://blog.cyberoo.com/hubfs/raw_assets/public/Cyberoo_May2023/images/a0e3aa33abf348490d739e99e692012d.svg "Capterra")](https://www.capterra.com/reviews/206253/Cyber-Security-Suite?utm_source=vendor&utm_medium=badge&utm_campaign=capterra_reviews_badge) ![Gartner Peer](https://blog.cyberoo.com/hubfs/raw_assets/public/Cyberoo_May2023/images/GartnerPeerInsightsLogo-white.svg "Gartner Peer") - SERVICES - [CYPEER](https://cyberoo.com/en/managed-detection-and-response/) - [CSI](https://cyberoo.com/en/threat-intelligence/) - [INCIDENT RESPONSE](https://cyberoo.com/en/incident-response/) - [TITAAN NEEMESI](https://cyberoo.com/en/titaan-neemesi/) - [KEATRIX](https://cyberoo.com/en/keatrix-security-awareness-training/) - USEFUL LINKS - [WE ARE CYBEROO](https://cyberoo.com/en/company/) - [BLOG](https://blog.cyberoo.com/en) - [CONTACTS](https://cyberoo.com/en/contacts/) © 2026 Cyberoo. Registered Office: Via Brigata Reggio, 37 - 42124 Reggio Emilia (RE) - PEC amministrazione@pec.cyberoo.com Fully paid-up share capital € 1.035.432,35 Tax Code and VAT No. 04318950286 - R.E.A. RE 288453 [Privacy Policy](https://cyberoo.com/privacy-policy/) - [Privacy Policy - National Register of State Aids](https://www.rna.gov.it/RegistroNazionaleTrasparenza/faces/pages/TrasparenzaAiuto.jspx)- ISO27001 - - - ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "cyberoo-admin", "url" : "https://blog.cyberoo.com/en/author/cyberoo-admin" }, "dateModified" : "2024-03-12T15:13:21.150Z", "datePublished" : "2021-08-05T06:00:00.000Z", "headline" : "Cyber security systems: why holistic solutions are needed", "image" : [ "https://blog.cyberoo.com/hubfs/holistic%20solutions%20Blog%20Cyberoo.png" ], "mainEntityOfPage" : { "@id" : "https://blog.cyberoo.com/en/cyber-security-systems-why-holistic-solutions-are-needed", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/vast.png" }, "name" : "Cyberoo" } } ``` ```json { "@context" : "https://schema.org", "@type" : "Article", "articleBody" : "Cyber security systems are now not only required to protect and defend against digital intrusions, but also to help enable the business. In fact, cyber security, designed to continuously monitor digital systems and implemented to immediately identify a breach and to contain and resolve a cyber incident, significantly helps with the operational continuity of company systems that support the business. The mistake of cyber security systems in silos The technological development of cyber systems has caused a parallel development over time of cyber security systems: firewalls, gateways, antivirus, anti-spyware, honeypots, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Data Loss Prevention systems (DLP), deep packet inspection systems, traffic filtering, encryption systems, Back Up management systems, sandboxes, advanced malware protection, next-gen firewalls, authentication systems, tokens, etc. However, it is rare that all these systems are managed by the same people and they are often connected to the same computer system at different times and with different management goals. All of these solutions form a cascade of information to be governed and protected, and serves as a potential extension of the attack surface, precisely because each individual piece of technology becomes part of the computer system that it is called to protect. This type of security approach is called “a puzzle”, because it grows opportunistically according to requirements and develops in every direction, rather than in a structured way. The same applies for systems that grow in silos, or separate compartments, where every environment has its own management and policy rules. The silo set-up emphasizes the approach, looking at it from the point of view of the architectural layers involved. The next step towards a holistic model of cyber security systems The most immediate consequence of the varied introduction of cyber security systems causes a huge variety of approaches and degrees of maturity. This situation usually culminates in a moment of such unmanageable chaos that you need to streamline and centralize. To do this, you have to evolve towards a unique approach which, however, helps retain the individual features of the respective tools so they remain interoperable, but connected to unique policies and procedures that are different yet coherent, complementary and correlated. In these cases, we are talking about evolving towards a holistic model, i.e. collaboratively developing an approach to combating threats, including the organizational framework and supporting integration and cooperation on every level, whether digital, logical or physical. In this sense, we are also talking about the convergence of the system’s entire architecture. Giulio Iucci, president of ANIE Sicurezza, explains that “convergence is now a ‘systemic’ reality; everything is connected, just like one single large organism. The approach to cyber security must therefore be holistic, global and just as systemic”. The critical infrastructure no longer just governs and enables essential services for the population. In some ways, a critical infrastructure is also a set of computer systems, including cyber security systems which, for each individual company, allow business activities and operations. Giulio Iucci continued “In the past, there were critical infrastructures. Nowadays, everything has become critical, from the point of view of hi-tech security. The intervention and action logic is completely changing for them. There is no longer the ‘periphery’ of the network, the fringe and second level of the system. It is all central and primary, and this brings a new logic of vulnerability. The fundamental point for building security is therefore the entire system architecture and the holistic vision of everything”. Security methods are also changing and while before cyber security systems were set according to the “action and reaction” model, nowadays Command and Control requires preventive intervention based on system monitoring, data interception, correlation and analysis. This enables Early Warnings and requires, downstream of the incident management process, the introduction of a weakness review to introduce corrective measures aimed at continuous improvement. In this sense, the adoption of a certification framework such as ISO 27001 (based on the Deming cycle of Plan-Do-Check-Act) and/or the NIST Framework can help in the transition from an old-style model of introducing cyber security systems to the new set-up. It is therefore about switching from traditional “contingency” management for security to a strategic, comprehensive view of protection. Starting from a threat assessment that is not generic but rather specific to your organization, specific risks can be associated by using a Threat Model, and for each one, company processes, security measures and cyber security systems are organized and governed using a synergistic approach. This involves a holistic approach: a global, strategic view of cyber security systems as part of the more general organization of digital systems to support the business.", "author" : { "@type" : "Person", "name" : "cyberoo-admin", "sameAs" : [ "https://www.linkedin.com/company/cyberoo-italia" ], "url" : "https://blog.cyberoo.com/en/author/cyberoo-admin" }, "dateModified" : "1784109018231", "datePublished" : "2021-08-05 06:00:00", "description" : "How to abandon siled approaches, contingent on emergency, to evolve IT security systems towards a holistic approach.", "editor" : { "@type" : "Person", "name" : "cyberoo-admin" }, "headline" : "Cyber security systems: why holistic solutions are needed", "image" : { "@type" : "ImageObject", "height" : 675, "url" : "https://content.cyberoo.com/hubfs/holistic%20solutions%20Blog%20Cyberoo.png", "width" : 1200 }, "inLanguage" : "it-IT", "isAccessibleForFree" : true, "mainEntityOfPage" : { "@id" : "https://blog.cyberoo.com/en/cyber-security-systems-why-holistic-solutions-are-needed", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "" }, "name" : "Blog", "sameAs" : [ "https://www.linkedin.com/company/cyberoo-italia" ] }, "url" : "https://blog.cyberoo.com/en/cyber-security-systems-why-holistic-solutions-are-needed", "wordCount" : 778 } ```