Command Zero has released its latest report, “Top Challenges in Cyber Investigations & Recommendations for SecOps Leaders.” The interview-based document shines a light on the top challenges in cyber investigations, along with recommendations for security operations leaders.
Survey Methodology
To obtain the data for the report, Command Zero interviewed 352 professionals over two years to gain a greater understanding of the current state of investigations. Survey participants included CISOs, security VPs, directors, managers, incident handlers and responders, legal counselors, and risk leaders from a wide array of organization sizes, verticals and geographies.
Read More: 2024 Cyber Policy Trends: What’s New in Data Privacy?
Key Takeaways
- 88% of respondents expressed concerns about operational issues related to the lack of skilled staff and high attrition rates
- 92% of security professionals reported a lack of standardized processes for cyber investigations
- 72% of those surveyed admitted to having blind spots for non-security data sources.
On Record
In a recent quote, Dov Yoran, cofounder and CEO at Command Zero, said, “Cyber investigations are where the rubber meets the road: Security operations teams need to come to a verdict for the hardest, most complex high priority cases. This research confirms the top challenges security leaders face today, and where CISOs can make a meaningful impact. Despite improvements in other aspects of SecOps, investigations remain ad-hoc processes, lacking consistency and auditability. Clearly, we need to address increasing challenges with infrastructure complexity, the universal talent gap, higher regulatory and compliance requirements. Using expert platforms, AI and automation will help overcome the challenges identified by this research. We hope the findings and recommendations in this report help guide improvements in security operations.”
Joe Albaugh, SVP, CISO at NRG Energy, added, “These findings shouldn’t come as a surprise to cyber leaders. Understanding the challenges around cyber investigations and building the right processes will improve mean time to understand, respond and remediate. This is the only viable path to fewer breaches and reduced impact for incidents.”
