IR teams, typically operating under a formalized IR plan, are designed to detect, investigate and, when necessary, remediate organizational assets in the event of a critical incident.
SANS conducted a survey with the goal being to get a clearer picture of what IR teams are up against today. Such as, the types of attacks they see and what defenses they have in place to detect and respond to these threats. In addition, the survey measured the IR teams' perceived effectiveness and obstacles to incident handling.
Download this white paper to explore:
- The number of critical incidents the organizations surveyed have experienced that required incident response;
- The nature and frequency of these critical incidents;
- The impact of these date breach incidents;