THE CYBER DECEPTION MATURITY MODEL: WHERE DOES YOUR ORGANIZATION STAND?

Summary from the TLDR InfoSec newsletter

This post divides cyber deception into 5 levels: pre-deception, where an organization does not employ cyber deception; experimental, where an organization deploys simple deception that only succeeds at catching automated scanners; operational, where an organization can catch human threats; strategic, where an organization's deception resources mimic authentic resources and mimic high-value targets; and optimized, where deception goes beyond detection and shapes adversary behavior. Each level includes key metrics to track as well as steps to advance to the next level.