Cybersecurity best practices are often driven by the vendor community within information security, but they are nothing more than a set of methodologies and processes based on the theory of what will allow a company to stop or contain a breach, according to Chris Morales, head of security analytics at Vectra.