Enterprises Struggle to Manage Unfamiliar Risks: How to Take Back Control

Post Views: 13

Take Back Control as Enterprises Struggle to Incorporate Risks They Don’t Understand

The Challenge of Unmanaged Vulnerabilities

More than 48,000 vulnerabilities were disclosed in 2025, yet only approximately 1% are actively exploited. Despite this, organizations face pressure to address all vulnerabilities, particularly critical and high-severity ones. However, challenges arise when patches are unavailable or software becomes unsupported.

Strategic Risk Assessment and OPTAS

Ben Lipczynski, Director of Security and Regulatory Services at Optima, addresses these issues in a discussion on how enterprises can regain control over their software environments. The conversation highlights the limitations of traditional vulnerability management approaches. While 48,000 vulnerabilities were identified in 2025, the majority remain unexploited, yet security teams are often compelled to act on all findings. This creates operational strain, especially when remediation options are limited.

The Need for a Proactive Approach

Lipczynski emphasizes the need for a more strategic approach to risk assessment, focusing on threats that pose real, actionable risks rather than addressing every disclosed issue. A key solution presented is the OPTAS (Origina Proactive Threat Assurance Service), which offers a targeted method for identifying and mitigating threats. Unlike generic AI-driven tools that generate broad alerts without actionable guidance, OPTAS employs a context-aware framework to prioritize risks based on an organization’s unique environment.

Cybersecurity Leadership Challenges

The discussion also touches on broader challenges in cybersecurity leadership. A report indicates that 75% of CISOs believe executive leadership lacks a clear understanding of cybersecurity risks. This disconnect complicates decision-making and resource allocation. Lipczynski underscores the evolving role of the CISO, who must now balance technical expertise with business acumen to align security strategies with organizational goals.

Complexity and Talent Gaps

Additional insights from the segment include the growing complexity of vulnerability management programs, which often rely on fragmented tools and inconsistent data. Security teams struggle to unify risk visibility, exacerbating inefficiencies. The conversation also addresses the cybersecurity talent gap, stressing the need for CISOs to adopt innovative hiring and retention strategies.

Expertise and Framework Development

Lipczynski’s background in defense, government, and enterprise cybersecurity informs his perspective on risk mitigation. With over two decades of experience, he has led initiatives in mission-critical systems, emphasizing the importance of evidence-based security models. His work at Origina focuses on developing frameworks that enhance resilience while maintaining control over software and infrastructure.

Conclusion and Call to Action

The segment concludes with a call for enterprises to adopt proactive, risk-based strategies rather than reactive measures. By leveraging tools like OPTAS and fostering collaboration between security teams and leadership, organizations can better navigate the complexities of modern threat landscapes.