Cyber-Attacks: A Failure to Detect, Investigate

Cyber-Attacks: A Failure to Detect, Investigate

Current Point Solution Approach to Cyber-Security Is Flawed

86% of respondents say it takes too long to detect a cyber-attack.

Alerts Are Not Prioritized

85% say they suffer from the inability to prioritize alerts as they arrive.

Point Solutions Are Not Integrated Well

74% say poor or no integration between security products hinders their response capabilities.

Many Alerts Paralyze Incident Response Efforts

Too many alerts from too many point solutions hinder investigations, according to 61% of respondents.

Root Causes Remain Mysterious

66% of respondents say determining the root cause of prior incidents helps them strengthen defenses, but 38% say finding the root cause could take a year.

Two-Fifths of CISOs Resigned to Unknown Causes of Attacks

41% of respondents say they would never be able to identify the cause of security events with certainty.

Latest Indicators of Data Breach Largely Unusable

59% of respondents say they cannot efficiently and effectively use integrated threat intelligence with their security products.

Importing Multiple Threat Intelligence Feeds Is Difficult

40% of respondents say none of their security products support imported threat intelligence from elsewhere.

Investigating Attacks on Mobile Devices

86% of respondents rate the investigation of mobile devices as difficult.

Locating Trade Secrets on Mobile Devices

54% of respondents say they cannot or are unclear about how to find sensitive data, like trade secrets and personally identifiable information, on mobile devices.

Incident Resolution Platform Recommended

Says Craig Carpenter, Chief Cyber Security Strategist at AccessData, “Companies need an incident resolution platform that doesn’t just integrate alerts from myriad point solutions, but makes intelligence actionable and automates significant current portions of the incident response process.”