Barriers to Effective Incident Response: A SANS Survey
SANS conducted a survey focused on the current state of Incident Response (IR), polling security professionals from more than 19 industries and various-sized companies and organizations. The goal was to get a clearer picture of what IR teams are up against today - the types of attacks they see and what defenses they have in place to detect and respond to these threats. In addition, the survey measured the IR teams' perceived effectiveness and obstacles to incident handling.
Download this white paper to explore why many IR professionals feel their organizations' IR capabilities are ineffective, including:
- How broad definitions of an incident place a strain on IR teams.
- Lack of time to review and practice IR procedures is a primary barrier to effective IR.
- Lack of formalized IR plans and dedicated staff plague most organizations.
