Security and PCI: 4 Things You Need to Know
0 likes220 views
Security teams are receiving more alerts than they can investigate from SIEM tools used for incident detection and response. Most organizations plan to increase spending on incident response programs in the coming year to improve visibility and speed of investigating security incidents across internal and cloud-based systems. Compromised credentials are a major concern since the majority of companies cannot effectively detect attacks using stolen login information.
Security and PCI: 4 Things You Need to Know
- 1. Maintaining and customizing SIEM deployment, Vulnerability Management, and Firewall Replacement were among the top security initiatives in 2015. Security priorities included detecting stealthy attacks, getting visibility across the network ecosystem, and investigating security incidents faster. Are you planning to purchase a SIEM? 62% of organizations are receiving more alerts than they can investigate. Respondents were asked about their security strategy for the coming year. SIEMs are the most popular IDR solution, with 50% of SIEM users citing Incident Detection as the key driver for purchasing the tool. 4.5 out of 10 expected Incident Response program spend to increase 1.5 out of 10 expected Incident Response program spend to decrease What security products do you use for Incident Detection and Response? How many daily alerts do you receive from your SIEM? How many security alerts can your team investigate per day? 79% of companies allow the use of approved cloud services. 67% of companies don’t have security visibility into those cloud services. 201+ 75-200 26-74 11-25 1-10 1-10 11-2526-74 75-200 201+ Office 365, Google Apps, and Salesforce are the top 3 cloud services used by businesses. 52% Already have one 22% Yes 26% No User Behavior Analytics Forensics Malware/Sandboxing Solution IPS Endpoint Agent SIEM 80%0% 10% 20% 30% 40% 50% 60% 70% Netflow Compromised credentials are a concern among 90% of companies. 60% cannot detect attacks that use compromised credentials 48% say detecting credential-based attacks is the highest security priority. Rapid7 surveyed 271 security professionals about the state of their incident response program, their primary security concerns/challenges, and their plans for 2016. Get the full report at: www.rapid7.com/resources/incident-detection-response-survey.jsp ABOUT THE SURVEY TAKERS: Size of the organization Size of the security team 1-1000 employees 1001-5000 employees 5001+ employees 56% 19% 25% 20% No dedicated team 10+ persons 1 person 32% 6-10 persons 20% 2-5 persons 14% 14% Learn about Rapid7’s Incident Detection & Response solutions at www.rapid7.com