As a result, contextual intelligence must combine technical context (exploitability, exposure, existing measures) with business context (which systems support critical processes, legal obligations, or contractual commitments), he says.
“Without that combination, there is no real risk management, only prioritization based on technical needs,” he says.
Javier Castillo, operations director of Secure&IT, says it’s important to note that CTEM doesn’t replace penetration testing or red team activities, which “remain fundamental services for identifying complex vulnerabilities, design errors, logical failures, or advanced attack techniques that can hardly be detected through automated processes,” he says.
