Which of the following security risks are you most concerned about affecting your organization moving into 2022?

Security & GRC Threat Intelligence & Incident Response

Disruption via ransomware20%

Exploitation via phishing55%

Exfiltration of PII (Personally identifiable information)12%

Disruption via DDoS attacks4%

Disruption of a business-critical application7%

Other (comment below)

522 PARTICIPANTS

2.2k views1 Comment

Sort by:

Global Chief Cybersecurity Strategist & CISO in Healthcare and Biotech2 years ago

It's 2023 not 2022

Content you might like

Are you seeing changes in the quality or speed of threat intelligence from sources you relied on in previous years? Can you share how you are being impacted so far by the uncertainty around public-private partnerships for cyber information sharing?

Read More Comments

Do you ever search for fake profiles impersonating your C-Suite?

Always7%

Often55%

Sometimes22%

Rarely9%

Never5%

View Results

Hackers who ransomed LAUSD have released the school district’s data after its superintendent refused to pay — would you have paid the ransom?

Yes58%

No38%

Other (explain in the comments)2%

View Results

How can security leaders in smaller organizations stay informed about emerging threats if they don’t have access to formal threat intelligence feeds?

Read More Comments

Has anyone drafted an SOW for a cloud-based SIEM with setup, migration, and maintenance? I’m working on a FedRAMP-authorized SIEM SOW, migrating from on-prem Splunk, covering data, searches, alerts, dashboards, and models. Scope includes Environment Setup: Cloud provisioning, configuration, testing. Connectors/Parsers: Custom data source integration. Content Development: Rules, use cases, threat feeds. Performance Tuning: Query/index optimization. Runbooks: Operational procedures. Also required: 24x7 support, maintenance, lifecycle and application management, role-based training, and documentation. Must comply with NIST SP 800-53, CJIS, and FedRAMP Moderate+. Goal: Secure, scalable SIEM for rapid deployment. I may be missing elements, so suggestions are welcome. Please share redacted SOWs or tips if possible.