Not yet receiving Enterprise Strategy Group research in your inbox? Find out why the vendor community is buzzing about the Data Point of the Week by signing up to receive this consumable weekly dose of industry insight!
Source: Enterprise Strategy Group Research Report, Incident Response Strategies in the Spotlight, February 2024.
Ransomware, business email compromise, and other attacks are increasingly evading cybersecurity defenses, causing IT and cybersecurity teams to further invest in incident response (IR) readiness. As such, incident response can no longer be viewed as an event-driven action but must be operationalized and become a core strategy within security operations. As security and line-of-business teams react to this new reality, new incident response strategies are needed for most.
Few have the internal resources and capacity to handle this key function on their own, requiring many to leverage a service-based approach. While managed security service providers and managed detection and response service providers have become commonplace, a deeper partnership is needed to enable real-time IR services capable of mitigating damage from successful attacks. Cybersecurity leaders need to better understand the differentiation of IR services as a standalone offering versus those included in a broader set of service offerings to make more informed decisions.