Has your organization been hit by ransomware in the last 6 months?

Security & GRCThreat Intelligence & Incident Response

Yes40%

No, but we expect to be hit in the future.42%

No, and we don't expect to be hit by ransomware in the future.17%

240 PARTICIPANTS
2.7k viewscircle icon1 Upvotecircle icon2 Comments
Sort by:
Fractional CIO in Services (non-Government)4 years ago

That 3rd option, wow... Its one thing to believe you have all the controls in place to mitigate the risk of a ransomware attack, but to not expect one?

Risk posturing suggests you should expect one, because it's better to be prepared than caught unaware.

Lightbulb on2 circle icon1 Reply
no title3 years ago

I agree. You constantly have to be thinking about how you might be impacted and how to minimize that as well as when I do get impacted, how am I going to recover.

Lightbulb on1

Content you might like

Who owns Communication in Network vs. Security Incidents? Best Practices & RACI Guidance Needed In many organizations, Network and Security teams both play a role in incident response, especially when firewall or SASE issues impact network performance. When an issue is first diagnosed by the Network team but determined to be security-related, who should own the ongoing communication, resolution updates, and root cause reporting? I’d love to hear from the community:  • Are there best practices, ITIL/ITSM frameworks, or RACI models that clarify ownership?  • How does your organization handle communication handoffs between Network and Security teams?

Read More Comments

How long does your organization retain original systems logs used to filter SOX-related actions into a system that requires review of the logs and retains the filtered logs for seven years? Does your organization consider those original system logs records subject to record retention requirements, or supporting information used to create the SOX records?

90 Days14%

365 Days36%

3 years33%

5 years7%

7 years10%

Other (share in the comments)

View Results

Our IT department is refreshing our SLAs and KPIs for Incident Management.  I would like to know who is a recognized authority on industry averages for IT Service Management processes for the service desk?  Below are examples of what I am looking for an industry average on. P1 95% resolved within 4 elapsed hours P2 90% resolved within 8 service hours P3 85% resolved within 3-5 days P4 85% resolved within 28 days

How can security leaders in smaller organizations stay informed about emerging threats if they don’t have access to formal threat intelligence feeds?

Read More Comments

How much did your organization's technology spend increased to deal with Covid-19 during 2020? (A percentage of your total IT Budget)

1% - 5%16%

6%-25%51%

26%-49%17%

50% or More6%

Not Sure2%

No additional funds were used.5%

View Results