EMEA businesses too slow to detect a data breach
It takes businesses in the EMEA region (Europe, Middle East, Africa) three times longer than businesses elsewhere in the world to detect a breach, mostly because they’re forced to detect such hits themselves instead of relying on outside help.
Those are the general conclusions of the first Mandiant M-Trends EMEA Report. The report, released by security experts FireEye, is based upon the statistics collected during investigations in the region, done by Mandiant’s leading consultants in 2015.
The report says that EMEA businesses need, on average, 469 days to detect a breach. High number, knowing that globally it takes about 146 days.
FireEye believes another important metric is behind this poor statistic -- external sourcing. Just 12 percent of breaches observed in the report were discovered by an external source, when globally external sources account for more than half (53 percent) of spotted breaches.
As businesses look for these breaches themselves, they’re usually tasked with analyzing them as well. They do so by using "unsuitable techniques", leading to a failure in understanding the true scope of the breach. Ultimately, they’re keeping themselves vulnerable to a new breach, which frequently happens.
"The majority of organizations need to move away from the traditional methodology of responding to incidents as otherwise the dwell time will not decrease at a fast enough rate", said Bill Hau, vice president of Mandiant Security Consulting Services, FireEye.
"This, coupled with the fact that some EMEA governments are at various levels of maturity with their national CERT capabilities / mandate has resulted in businesses being under tremendous pressure to detect threats themselves and, according to our statistics, they simply have not been quick enough to do so. From our observations, there are clearly some stark contrasts between EMEA and the rest of the world, which boardrooms in the region need to address".
Published under license from ITProPortal.com, a Net Communities Ltd Publication. All rights reserved.