Configure → Drift → Breach → Repeat: The Cycle of Cybersecurity Control Configuration Risk
Get the report
John Dominguez is a Senior Director of Product Marketing at Reach Security. He has over 13 years experience in cybersecurity product marketing, technology messaging and positioning, go-to-market strategy and campaigns, content creation, and product launches. In his previous role at Splunk, John led security product marketing throughout five years of rapid growth with coverage across nine products and services, including Splunk SOAR, SIEM, UEBA, Attack Analyzer, Mission Control, AI Assistant for Security, Security Essentials, Splunk Threat Research Team, and Splunk SURGe. Prior to Splunk, John spent seven years at Cisco marketing endpoint security, intrusion prevention, firewall, threat intelligence, and malware analysis products.
AI-powered attacks are moving faster, scaling wider, and increasing in volume. Defenders need AI-powered defenses to quickly deny AI-attackers an opening, and close security control gaps before AI attacks can exploit them.
A new research report from Reach Security reveals that misconfigured security controls, configuration drift, and unused capabilities across an organization’s existing security technology stack are a primary driver of cybersecurity risk. Among a sample of 250 cybersecurity professionals, 97% of respondents said their organization had either a confirmed breach or a near miss in the past year because of a cybersecurity tool misconfiguration.
Traditional NSPM tools excel at defining and enforcing policies but struggle to verify that those configurations remain intact. Once deployed, policies can drift quietly for weeks or months, only surfacing when an incident or audit exposes the discrepancy. Reach Security extends NSPM beyond policy management into policy assurance – ensuring that what’s configured always matches what’s intended.
To join the community of customers enjoying the benefits of Reach and learn more about how it can transform your security posture, visit:
© 2026 Reach Security.
Terms of use