IT disaster recovery, cloud computing and information security news

Daisy

Survey identifies security blind spots as organizations tackle advanced threats

As the quantity and frequency of advanced threats continue to accelerate, a new SANS Institute survey, ‘Effectively Addressing Advanced Threats’, found that a continued lack of visibility and the complexity of managing data across on-premises and cloud infrastructures further complicates the battle against such threats.

The survey, sponsored by IBM Security, highlights key technology challenges and limitations that organizations are self-identifying in their efforts to detect and respond to highly sophisticated cyberattacks. SANS Institute surveyed 366 security and IT professionals across various industries to gain insights into how they deal with advanced threats.

According to the findings, 48 percent of respondents said they lack visibility into data that is processed within their organizations. Access to sensitive data by insecure, unmanaged devices or individuals as well as a lack of geolocation information of the data were also identified as concerning blind spots to organizations.

When asked about the major barriers to detecting and remediating advanced threats, nearly half of the respondents emphasized an inability to understand or baseline normal user activities, with shortage of funding and resources coming in as a close second. Conversely, account or credential hijacking and privileged user abuse topped the list of major threats and risks realized within respondents’ environments.

The survey also looked at the challenges that respondents face within their cloud infrastructures, and found that a lack of visibility remains at the core of their limitations. When it comes to major gaps in the security analytics of their cloud-based infrastructure:

  • More than half of the respondents expressed concerns about integrating data with analytics tools and combining data across cloud environments;
  • Nearly 55 percent struggle with a lack of integration between current security analytics tools and cloud infrastructure;
  • Approximately 43 percent faced a lack of threat insights targeting cloud environments.

www.sans.org



Want news and features emailed to you?

Signup to our free newsletters and never miss a story.

A website you can trust

The entire Continuity Central website is scanned daily by Sucuri to ensure that no malware exists within the site. This means that you can browse with complete confidence.

Business continuity?

Business continuity can be defined as 'the processes, procedures, decisions and activities to ensure that an organization can continue to function through an operational interruption'. Read more about the basics of business continuity here.

Get the latest news and information sent to you by email

Continuity Central provides a number of free newsletters which are distributed by email. To subscribe click here.