Enterprises are getting serious about managing the increasing volume of security events

The Bottom Line: The digital ecosystem is expanding and so is the volume of security events. The next two years will see organizations thinking beyond just monitoring their own perimeter to better monitor security risks across their ecosystem, and this situation will naturally lead to a significant increase in security events. In response to that, eighty-three percent (83%) of enterprise clients are planning to invest in emerging technologies to help security teams automate and orchestrate the end-to-end management of security events.

Our latest Cybersecurity Pulse study shows that almost three out of four (74%) enterprise clients agree or strongly agree that managing security events in a holistic and integrated way across the organization is currently their biggest challenge (ranked as number one challenge). When asked about the reasons behind that, enterprise clients reported four main root causes:

• Sixty-seven percent (67%) highlighted that the cybersecurity team is understaffed for the size of the organization, preventing them to appropriately manage the increasing volume of security events and alerts.
• Sixty-six percent (66%) flagged that the organization depends upon too many manual and/or informal processes for gathering data from disparate systems and data sources, analyzing events and responding security incidents.
• Sixty-two percent (62%) mentioned that the cybersecurity team is struggling to select and implement the necessary remediation actions in a timely manner, leading to a significant risk exposure.
• Sixty percent (60%) flagged that the cybersecurity team lacks the right skills to efficiently analyze and correlate security events, preventing them from generating actionable insights to avoid repeat incidents.

The need for augmentation and automation is clear and the reassuring news is that most enterprise clients are taking the necessary actions to tackle the “death by security event” challenge. But technology alone is certainly not a guarantee of success and choosing the right target operating model at the beginning of the journey is crucial.