From Suzanne Spaulding & Carl Windsor | Cube Conversation · · SiliconANGLEtheCUBE
“The key thing is to secure the products, to look for the issues that may lie, to fix them rapidly, but then to get as much information out to the customer as possible so they know, give them the information that they need to assess the risk.”
On , Carl Windsor, Chief Information Security Officer at Fortinet, spoke about product security during Suzanne Spaulding & Carl Windsor | Cube Conversation on SiliconANGLEtheCUBE.
In a December 2023 Cube Conversation, Carl Windsor, Senior Vice President of Product Technology & Solutions at Fortinet, discussed the company’s approach to transparency in cybersecurity. He stated that Fortinet shipped 50% of all worldwide firewalls the previous year and described a "duty of care" to customers. Windsor said the company discovered 83% of the vulnerabilities it published were its own, adding that Fortinet does not hide issues and provides customers with information needed for risk-based decisions. He described the principle that "sunlight is the greatest disinfectant" and said the company works with outside partners on responsible disclosure. Windsor acknowledged that customers find the pace of change "a little bit frenetic" and suggested that vendors can help by offering automatic upgrades and virtual patching technologies to give customers "breathing space" during upgrade processes. He emphasized that "radical transparency" is important for giving customers the information they need to make decisions about their security posture.