"However, what I observe, what I fear, what I see too much of, are many commentators in the industry and media focus on attribution with very little focus on the root cause.
"No one should lose valuable information where, at the root cause, there is a known remedy. For me that is unforgivable in this day and age. Too much of this distraction around attribution takes away from what we should be focussing on.
Burgess went on to criticise companies like Sony, Anthem and US retailers, Target and Home Depot, for blaming the data breaches suffered by these two organisations on the sophistication of the attacks the firms fell victim to.
"When I see language like that. The use of the word 'sophisticated' I do worry," he said.
"In most of these cases, there was, at the root cause, a known remedy for that vulnerability or weakness. We know what they are. We know socially engineered emails with a malicious attachment, a link to some injection code or the exploitation of vulnerable web facing code is still the primary method by which these actors do what they do."
Sign up for Computerworld eNewsletters.