Who do you think is behind the SolarWinds attack?

Security & GRCCrisis & Incident Management

China46%

Iran18%

Russia32%

Other (comment below)3%

200 PARTICIPANTS
2.6k viewscircle icon3 Comments
Sort by:
Senior Director Engineering in Travel and Hospitality3 years ago

Why should these be associated to a country!?

Information Security VP, Information Technology in Retail5 years ago

Russia

Director in Construction5 years ago

Similar actors as Sandworm - Russia

Content you might like

What is your primary deciding factor in adopting enterprise search?

TCO17%

Pricing24%

Integrations21%

Alignment with Cloud Provider9%

Security11%

Alignment with Existing IT Skills5%

Product / Feature Set9%

Vendor Relationship / Reputation

Other (comment)

View Results

Our IT department is refreshing our SLAs and KPIs for Incident Management.  I would like to know who is a recognized authority on industry averages for IT Service Management processes for the service desk?  Below are examples of what I am looking for an industry average on. P1 95% resolved within 4 elapsed hours P2 90% resolved within 8 service hours P3 85% resolved within 3-5 days P4 85% resolved within 28 days

We need a DSAR solution to reduce time and effort of the currently manual process. We've looked at OneTrust, Aiimi and Smartbox and have been advised to also consider Mine and Transcend? 

Anyone with any feedback or guidance? Also if anyone has smart ideas on redaction solutions?

What are the top three factors that can lead to a hybrid cloud security breach?

Unsecured access to cloud resources28%

Poorly configured cloud infrastructure62%

Unpatched security vulnerabilities50%

Inadequate cloud security policies28%

Lack of encryption13%

Unauthorized access to data4%

View Results

Who owns Communication in Network vs. Security Incidents? Best Practices & RACI Guidance Needed In many organizations, Network and Security teams both play a role in incident response, especially when firewall or SASE issues impact network performance. When an issue is first diagnosed by the Network team but determined to be security-related, who should own the ongoing communication, resolution updates, and root cause reporting? I’d love to hear from the community:  • Are there best practices, ITIL/ITSM frameworks, or RACI models that clarify ownership?  • How does your organization handle communication handoffs between Network and Security teams?

Read More Comments
Who do you think is behind the SolarWinds attack? | Gartner Peer Community