In enterprise cybersecurity, visibility can create value by giving teams better evidence for decisions—not just more data for audits. Joshua Goldfarb argues that broader visibility can support collaboration, influence behavior, improve risk assessment, and help organizations make more informed security decisions. Those are qualitative benefits, not a measured financial return: the cited article and NIST guidance do not establish a dollar figure or quantify breach reduction or behavior change.
What cybersecurity visibility means beyond monitoring
Visibility is an organization’s ability to understand what assets and activity it has, what risks affect them, and whether security controls are working well enough to inform action. NIST’s SP 800-137 describes continuous monitoring as a way to gain visibility into organizational assets, threats and vulnerabilities, and deployed controls so organizations can respond to risk in a timely way. Published in September 2011 for federal information systems and organizations, it is a framework resource—not a universal product prescription.
Goldfarb’s argument extends visibility beyond audit and compliance. Useful information can give security teams and application owners a concrete basis for discussing risk, rather than relying only on generic warnings. The value is not simply collecting more records; it is having relevant, accurate information that can support investigation, response, and decisions tied to business risk.
Which layers should an enterprise make visible?
Goldfarb says organizations should look beyond network, endpoint, and access logs to the application layer, including activity through API infrastructure and activity using AI capabilities. The aim is to understand how applications are being used and to help detect, investigate, and respond to incidents.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11#1 Best Overall
- AI Motion Detection 2.0 – Driving AI to the next level, human&vehicle detection and flexible detection area are more accurate than before. For quicker locating in crucial moments, human&vehicle smart searching in recordings offers you great help.
- Tried-and-True Safe Guard – This one-stop security solution can work with TVI, AHD, CVI, CVBS & IP cameras, the kit includes 1080P cams. The 8CH 3K lite DVR can hook up with 1080P@30fps or 3K/5MP@20fps cams. Therefore, you can also DIY it with other cameras in your home.
- Reliable 24/7 Continuous Recording – With a pre-installed 1TB HDD(Support up to 10TB HDD), providing 24/7 surveillance recording for you. Upgraded H.265+ saves more storage space and uses less bandwidth, recording videos longer and smoother viewing.
- Smart Dual-Light Effectively Guard Your Home – This newly upgraded security system offers you a crisp full color night vision, IR mode and color night vision switch flexibly. Once detect intruders, immediate pushes pop up on your phone, securing your peace of mind day&night.
- Color Night Vision & IP67 Weatherproof – Built-in IR lights and white lights, these cameras can see up to 100ft in B&W night vision, full-color night vision up to 66ft. Rated IP67, these wired cameras can brave all weather, and stand from cold to hot.
- Network: traffic and connections across the environment.
- Endpoint: activity on devices and systems.
- Access: who or what is accessing systems and resources.
- Application: activity within the software people use, including services exposed through APIs and use of AI capabilities.
These layers can overlap, and the relevant coverage depends on the organization’s assets and risks. In a hybrid or multicloud environment, complete knowledge and total visibility are not realistic. The practical task is to identify consequential gaps and address them, not to claim that every action can be observed.
How visibility can improve collaboration and decisions
Goldfarb, identified in the article biography as Field CISO at F5, writes: “The most sound decisions are data-driven ones.” That is his view, not a measured research finding. His case is that evidence about application activity and security risk can make conversations between security teams and application owners more specific and useful.
Rank #2
- No Subscription Required with aosuBase: All recordings will be encrypted and stored in aosuBase without subscription or hidden cost. 32GB of local storage provides up to 4 months of video loop recording. Even if the cameras are damaged or lost, the data remains safe.aosuBase also provides instant notifications and stable live streaming.
- New Experience From AOSU: 1. Cross-Camera Tracking* Automatically relate videos of same period events for easy reviews. 2. Watch live streams in 4 areas at the same time on one screen to implement a wireless security camera system. 3. Control the working status of multiple outdoor security cameras with one click, not just turning them on or off.
- Solar Powered, Once Install and Works Forever: Built-in solar panel keeps the battery charged, 3 hours of sunlight daily keeps it running, even on rainy and cloud days. Install in any location just drill 3 holes, 5 minutes.
- 360° Coverage & Auto Motion Tracking: Pan & Tilt outdoor camera wireless provides all-around security. No blind spots. Activities within the target area will be automatically tracked and recorded by the camera.
- 2K Resolution, Day and Night Clarity: Capture every event that occurs around your home in 3MP resolution. More than just daytime, 4 LED lights increase the light source by 100% compared to 2 LED lights, allowing more to be seen for excellent color night vision.
More informed decision-making
When teams can examine relevant activity and risk information, they may be better equipped to weigh security concerns against business needs and choose an appropriate response. NIST’s Cybersecurity Framework 2.0 provides a taxonomy of high-level outcomes for understanding, assessing, prioritizing, and communicating cybersecurity efforts. It does not prescribe how organizations must achieve those outcomes or require a particular technology.
More accurate risk assessment
Risk assessments depend on understanding the assets and activity that matter. NIST’s Identify guidance addresses asset management and risk assessment outcomes. Its Enterprise Risk Management Quick-Start Guide, published October 21, 2024, discusses integrating cybersecurity risk information into enterprise risk management and using common language to support monitoring, evaluation, and adjustment across organizational units.
Rank #3
- Outdoor 4 is our most affordable wireless smart security camera yet, offering up to two-year battery life for around-the-clock peace of mind. Local storage not included with Sync Module Core.
- See and speak from the Blink app — Experience 1080p HD live view, infrared night vision, and crisp two-way audio.
- Two-year battery life — Set up in minutes and get up to two years of power with the included AA Energizer lithium batteries and a Blink Sync Module Core.
- Enhanced motion detection — Be alerted to motion faster from your smartphone with dual-zone, enhanced motion detection.
- Person detection — Get alerts when a person is detected with embedded computer vision (CV) as part of an optional Blink Subscription Plan (sold separately).
Can visibility change behavior?
Goldfarb argues that visibility can act as a deterrent and encourage better user behavior. He illustrates the idea with a personal home-camera anecdote, but that story is not evidence that enterprise monitoring reliably changes employee behavior. Nor does the article quantify any effect on behavior, relationships, security incidents, or costs.
For an organization, the defensible takeaway is narrower: visibility may give teams information that supports clearer expectations, accountability, and collaboration. Whether it changes behavior in a particular environment is not established by the cited article or NIST materials.
Rank #4
- 【AI Motion Detection 2.0】Driving AI to the next level, human&vehicle detection and flexible detection area are more accurate than before. For quicker locating in crucial moments, human&vehicle smart searching in recordings offers you great help.
- 【Tried-and-True Safe Guard】This one-stop security solution can work with TVI, AHD, CVI, CVBS & IP cameras, the kit includes 1080P cams. The 8CH 3K lite DVR can hook up with 1080P@30fps or 3K/5MP@20fps cams. Therefore, you can also DIY it with other cameras in your home.
- 【Reliable 24/7 Continuous Recording】With a pre-installed 1TB HDD(Support up to 10TB HDD), providing 24/7 surveillance recording for you. Upgraded H.265+ saves more storage space and uses less bandwidth, recording videos longer and smoother viewing.
- 【Smart Dual-Light Effectively Guard Your Home】This newly upgraded security system offers you a crisp full color night vision, IR mode and color night vision switch flexibly. Once detect intruders, immediate pushes pop up on your phone, securing your peace of mind day&night.
- 【Color Night Vision & IP67 Weatherproof】Built-in IR lights and white lights, these cameras can see up to 100ft in B&W night vision, full-color night vision up to 66ft. Rated IP67, these wired cameras can brave all weather, and stand from cold to hot.
How to judge whether a visibility effort is worthwhile
There is no quantified ROI figure in the cited article or NIST guidance. A practical assessment should therefore focus on whether visibility makes risk decisions and response more useful, rather than claiming a proven financial return.
- Coverage: Does it include the assets and layers that matter, particularly application and API activity alongside network, endpoint, and access information?
- Data quality: Is the information accurate and complete enough for the decisions teams need to make?
- Risk relevance: Does the information connect to business objectives and the organization’s most consequential risks?
- Actionability: Can teams use it for timely investigation and for decisions shared across security and application groups?
- Effort and resources: Are the likely benefits of addressing a visibility gap proportionate to the work and resources required?
These are practical evaluation questions, not a published benchmark. They align with NIST’s outcome-oriented approach: use risk information to understand, prioritize, communicate, and adjust cybersecurity efforts, without assuming that more collection automatically means better visibility.
Recommended Free Tools
Best Value
- Video Doorbell is our second-generation smart security doorbell with up to two years of battery life, an expanded field of view, and improved security features for more peace of mind, no matter where you are.
- Last longer with two-year battery life — Experience up to two years of smart security coverage on both devices with included AA Energizer lithium batteries and a Blink Sync Module (included with Outdoor 4).
- See and speak from the Blink app — Experience head-to-toe HD viewing from Video Doorbell and 1080p HD live view from Outdoor 4 as well as infrared night vision and crisp two-way audio.
- See more at your door with Blink Video Doorbell — Greet guests and watch packages get delivered, day and night, with head-to-toe HD view and infrared night vision. Use two-way talk to hear and speak through the Blink app.
- Enhanced motion detection with Outdoor 4 — With our all-new Outdoor 4, enjoy a wider field of view and be alerted to motion faster with dual-zone, enhanced motion detection.
What the “hidden ROI” claim does—and does not—establish
In Goldfarb’s framing, ROI means indirect organizational value: better-evidenced conversations, more informed decisions, improved risk assessment, and the potential for deterrence or stronger collaboration. The article is an opinion and expert argument published by SecurityWeek on April 9, 2026, not a measured ROI study. The cited sources provide no named financial savings, breach-reduction percentage, or quantified behavior-change result. Treat the benefits as plausible aims to evaluate in context, not as guaranteed outcomes or a calculable return.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
