Ask any security professional and they’ll tell you that remediating risks from various siloed security scanning tools requires a tedious and labor-intensive series of steps focused on deduplication, prioritization, and routing of issues to an appropriate “fixer” somewhere in the organization. This burden on already resource-strapped security teams is an efficiency killer.
A new study, commissioned by Seemplicity and conducted by Dark Reading, provides fresh insight into how security pros handle the challenging remediation life cycle from discovery to resolution. The research reveals the obstacles security professionals face when coordinating remediation activities. The data exposes the outcomes — in increased workload and diminished risk posture — that arise from lengthy remediation times, inefficient and uncontrolled manual processes, the lack of managerial visibility and oversight across the risk life cycle.
Remediation Process Broken Down to Steps and Time Spent on Each Step
The survey, which encompassed 108 cybersecurity professionals, at companies with 100 or more employees, found that:
If there’s one recurring theme in the research, it’s that the combination of too many security tools and too much manual work being conducted across different teams blocks efforts to keep pace with today’s risk reduction and remediation workloads for the majority of organizations.
The “State of Risk Remediation” research provides a roadmap for improving efficiency and performance, bolstering organizational defense, and reducing risk — and security team’s sanity.
The report also highlights three key steps to improving risk reduction:
Download the full research report “The State of Risk Reduction: A Need for Speed” here.
Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.