What level of visibility do you have of your overall attack surface?

Threat Intelligence & Incident ResponseThreat & Vulnerability Management

Full visibility8%

High visibility (most of my attack surface)51%

Partial visibility (at least half of my attack surface)31%

Low visibility (less than half of my attack surface)4%

No visibility3%

I'm not sure1%

346 PARTICIPANTS
2.9k views

Content you might like

With Gartner highlighting the urgency of post-quantum cryptography (PQC), I would like to know if there are other members of the group already involved in the discussion or in the planning to face the threat of attacks like 'harvest-now, decrypt-later'?

If your organization uses Microsoft Exchange Server, have you patched the ProxyLogon vulnerability?

Yes58%

No31%

Unsure9%

View Results

Do you roll-out CASB deployment to all users or only selective more-sensitive users (eg VIPs)?

Only senior management36%

All senior officers and above38%

Everyone25%

View Results

A common challenge in our risk-tiering framework for suppliers is that even the lowest risk tier still requires processing.
Has anyone implemented a "not relevant" risk tier in their model?
This tier would apply to vendors posing genuinely negligible security risk.

How are you diversifying threat intelligence sources? Have you been able to reduce reliance on CISA for TI?

What level of visibility do you have of your overall attack surface? | Gartner Peer Community