Red Alert - A Data Breach Report

RED ALERT! ATTACK! 40% of companies can't detect a security breach in real-time. Varonis surveyed 248 security professionals at Infosecurity events in London and Orlando to better understand how well companies are able to spot breaches in progress. State of Alerts NO ALERTS LIMITED ALERTS COMPLETE ALERTS 6% 19% 24% 24% have no breach detection capabilities 19% have limited breach detection capabilities 6% have fully automated breach detection Why does it matter? Source: verizon 67% of incidents take several months to be discovered. 2013 DATA BREACH INVESTIGATIONS REPORT 70% of companies find out about breaches through their customers and third parties instead of their own IT departments. What are we missing? OF THE 248 COMPANIES SURVEYED 35% are not able to detect privilege escalations (and 14% were unsure if they could) are not able to detect 16% suspicious network activity (and 9% were unsure if they could) 35% are not able to detect suspicious data access (and 21% were unsure if they could) 20% are not able to detect suspicious activity on email servers (and 16% were unsure if they could) 33% are not able to detect when access controls change in undesirable ways (and 23% were unsure if they could) 40% are not able to detect when files containing sensitive data are created or accessed (and 31% were unsure if they could) Safety in numbers of large enterprises alert on access control changes (vs. the average of 28%) 36% of large enterprises alert on privilege escalation (vs. the average of 30%) 37% Vvaronis Research by Varonis Systems - http://www.varonis.com all about the data