I completely agree - companies need to focus on βwhat does it do, what does it stop, how does it complement what we already haveβ. I think that threat modelling and control mapping with ATT&CK helps here
Also, Iβm still waiting for the DDR acronym to make an appearance π€£