The industry average time to detect a supply chain breach is 267 days. SolarWinds went undetected for 14 months. XZ Utils took two years to surface. Socket, an a16z portfolio company, detected the malicious dependency in the Axios attack within 6 minutes of its publication.
检测时间的巨大差异（267天与6分钟）展示了安全检测领域的革命性变化。传统方法依赖已知漏洞数据库，而新型行为分析系统能够在攻击发生时立即检测到异常行为，这种能力差异决定了安全事件的严重程度。
Gap analysis in 4 steps
Instead of groping around in the dark, a gap analysis of the gap leads us through a detailed investigation of where our organization is currently and where we want to be. This allows us to act on the basis of facts, not on the basis of assumptions.
In contrast, a proactive L&D team will work to identify potential learning needs before they become a significant issue for the company. They’ll source potential needs from employee suggestions and prioritize those needs based on business impact. Sourcing training needs from employees is more accurate and helps you uncover training gaps before they grow.
The L&D team can work with the business, managers, employees, SME's to help with a bottom-up training needs analysis, and this can help with a more democratic learning culture.
