How often does your organization conduct vulnerability and risk assessments?
Quarterly31%
Twice per year42%
Annually15%
Vulnerability and risk assessments are ongoing activities.11%
460 PARTICIPANTS
Director, Information Security in Education, 1,001 - 5,000 employees
Risk assessments are done annually (and usually by 2 or 3 differing parties) and vulnerability assessment is ongoing, with monthly scheduled scans and unscheduled scans on a basis of emerging risks.Content you might like
CTO in Software, 201 - 500 employees
Without a doubt - Technical Debt! It's a ball and chain that creates an ever increasing drag on any organization, stifles innovation, and prevents transformation.Patch management: to reduce attack surface and avoid system misconfigurations39%
Malware and ransomware prevention: to protect endpoints from social engineering attacks59%
Malware and fileless malware detection and response: to protect against malicious software49%
Threat Hunting: to detect unknown threats that are acting or dormant in your environment and have bypassed the security controls33%
Not planning to change endpoint security strategy9%
182 PARTICIPANTS
Yes — always.37%
No, I don't mind sharing my data49%
Not yet, but I might opt out soon9%
Don’t know — I need to check!4%
159 PARTICIPANTS
ISSO and Director of the IRU in Healthcare and Biotech, 10,001+ employees
I would definitely suggest this based of how you categorize your types of data/systems and information being stored in certain parts of your data center. I think it’s really dependent on the size of your organization and ...read more