Companies Could Try Harder at Incident Response, Survey Finds
.png)
Companies got a failing grade for their incident response plans according to a study from the Ponemon Institute and IBM recently.
The Cyber Resilient Organization report, published on April 11, surveyed over 3600 global security and IT pros, and found that 77% of them lacked a consistent incident response plan.
A robust incident response plan can help manage data breach costs, according to last year’s Cost of a Data Breach report from BM and Ponemon. It found that the average cost per lost or stolen record was $148, representing a 5% rise from $141 in 2017.
Companies with an incident response team saved $14 per record on average in costs. This was the single biggest way to reduce the cost of a breach, according to the Cost of a Data Breach report. The next most effective was encryption, which reduced the cost by $13 on average.
Insufficient staff resources could factor into companies’ lack of preparation. The Cyber Resilient Organization study revealed that companies were suffering from insufficient staffing to cope with their cybersecurity challenges. Only 30% of them said that they have enough people to achieve a high level of cyber-resilience.
IBM is pushing automation tools as a way to bridge the skills gap and introduce better cybersecurity preparation and response. Automation technologies cover tasks such as identity management and authentication, incident response platforms and security information and event management (SIEM), it said. Fewer than a quarter of all respondents had embraced these technologies in their organization, it added.
In spite of this, just over three-quarters of respondents valued automation as a way of improving cyber-resilience, rating it seven or higher on a scale of 10.
While only 23% of companies overall had an incident response plan across the entire enterprise, that figure soared to 55% among what the survey termed high performers.
These companies, representing 26% of the sample base, self-reported nine or above on a scale of 10 when rating their cyber-resilience. They typically communicated more with senior leaders about the issue, who were more educated about it and tended to provide more cybersecurity funding and staffing. These organizations also valued automation more, it found.
source infosecuritymagazine
Industry: Cyber Security News
Latest Jobs
-
- Cyber Security Professional Services Lead | London | Immediate
- London
- N/A
-
Cyber Security Professional Services Lead London / Hybrid This role leads the delivery function for a cyber security professional services team, with ownership of utilisation, delivery quality, and team performance across multiple client programmes. You will drive billable utilisation, ensure projects are delivered on time and to standard, and manage resource planning across a complex portfolio. Acting as the escalation point for key engagements, you will also lead and develop a high-performing consulting team, maintaining strong client relationships and consistent delivery standards. Key responsibilities: Drive utilisation and delivery performance Ensure quality, on-time delivery across engagements Manage resource planning and capacity Act as escalation point for key programmes Lead and develop the consulting team Background: Currently leading a cyber or technology professional services function Recent track record improving utilisation and delivery outcomes Experience across multi-client, complex programmes Strong senior stakeholder engagement A hands-on leadership role with accountability for delivery, team performance, and commercial outcomes
-
- Cyber Security Sales | Enterprise | New Business | London
- City of London
- Uncapped OTE
-
Enterprise Account Executive | Cyber Security | UK London / UK (hybrid with client engagement) A scaling cyber security firm is hiring an Enterprise Account Executive to drive growth across large UK organisations. This role blends new business with ownership. You will open doors, create demand, and win enterprise accounts, then retain and grow those relationships into long-term, high-value partnerships. Targeting senior stakeholders at CISO, CIO, and board level, you will shape and close complex deals across cyber security, cloud, and transformation programmes. This is a strategic role. Fewer accounts, higher value, longer cycles. You are expected to build pipeline from scratch, with support around you but without reliance on inbound or marketing. A recent and consistent track record of achieving or exceeding sales targets is essential. This role requires someone currently performing at a high level in enterprise sales. UK-based, with remote working and client engagement as needed. Competitive base and uncapped earnings, with scope to build a meaningful enterprise portfolio.
-
- Cyber Security Sales | Financial Services | New Business | London
- England
- Uncapped OTE
-
New Business Lead | Cyber Security | Financial Services | London / UK UK Remote / London client travel A well-backed cyber security and technology firm is looking to hire a senior New Business Lead to drive UK growth, with a particular focus on Financial Services. This is a position for someone who knows how to open doors where others cannot. A role built around identifying opportunity, challenging incumbents, and converting that into long-term client relationships and revenue. You will own new logo acquisition across FS, working closely with leadership to shape go-to-market strategy and position across cyber security, cloud, and modernisation offerings. Full ownership of the sales lifecycle. Pipeline creation, deal strategy, negotiation, and close. The expectation is simple. Build momentum, win key accounts, and scale a function around you as revenue grows. Strong experience selling into Financial Services environments is key. Credibility at CISO, CIO, and board level matters. Remote-first, with London and client engagement as required. Competitive base, uncapped earnings, and genuine scope to build something meaningful. The successful sales person MUST have a recent history and current experinece of achieving / overachieving against sales target.