“Given the responses highlighting the need for better data access, and revealing inconsistent measurement and process improvements, this year’s respondents appear to be much more honest, realistic and self-aware. This is a significant change compared to previous years, as professionals are becoming more vocal about their dissatisfaction with traditional security practices’ inability to provide the intelligence necessary to counter evolving threats and address organizations’ changing requirements.”
When studying responses stating that professionals had “inconsistent” and “consistent” measurements and comparing them year over year, Sensage discovered that, while slightly more than 50% of the respondents felt they were inconsistently measuring in 2010 and 2011, 61% shared that challenge in 2012.
While responses in 2010 and 2011 reflected a close split between those who consider their processes coordinated and those that don’t, that was not the case in 2012, where 66% of respondents felt that they were resorting to reactive triage or had no coordination at all.
The bad news: A massive drop — from 18% in 2010 to 5% in 2012 — of those who felt they had a consistent and adequately staffed process improvement program.
More bad news: When comparing respondents who maintain consistent process improvement, there was a significant drop, from 65% in 2011 to 40% in 2012.
The bad news: A massive drop — from 18% in 2010 to 5% in 2012 — of those who felt they had a consistent and adequately staffed process improvement program.
More bad news: When comparing respondents who maintain consistent process improvement, there was a significant drop, from 65% in 2011 to 40% in 2012.
Worse news: 96% of 2012 respondents had no process, inconsistent process or consistent process that was understaffed.
For more information: http://www.net-security.org/secworld.php?id=13499