According to a 2020 global security automation survey, 56.9 percent of surveyed organizations found number of incidents identified through monitoring program as a useful metric for evaluating the state of incident response (IR) automation and integration.
Which metrics do you believe are useful for effectively capturing the state of incident response (IR) automation and integration?
Characteristic
Useful, but not using
Not useful
Both useful and using
Number of incidents identified through monitoring program
38.1%
3.5%
56.9%
Number of endpoints impacted by an incident
39.5%
3.2%
55.5%
Number of users impacted by an incident
42.7%
3.9%
52%
Mean time from detection to containment
50.9%
3.6%
44.8%
Mean time from compromise to detection
53%
3.2%
42.7%
Number of connected devices and configuration
47%
10.3%
41.6%
Mean time from containment to remediation
55.2%
3.9%
39.5%
Time to complete standard and custom tasks (e.g., average and mean time for each of the phases of the IR process)
Profit from the additional features of your individual account
Currently, you are using a shared account. To use individual functions (e.g., mark statistics as favourites, set
statistic alerts) please log in with your personal account.
If you are an admin, please authenticate by logging in again.
Learn more about how Statista can support your business.
SANS Institute. (May 14, 2020). Which metrics do you believe are useful for effectively capturing the state of incident response (IR) automation and integration? [Graph]. In Statista. Retrieved December 03, 2024, from https://www.statista.com/statistics/1168627/metrics-useful-for-capturing-state-of-ir-automation-and-integration/
SANS Institute. "Which metrics do you believe are useful for effectively capturing the state of incident response (IR) automation and integration? ." Chart. May 14, 2020. Statista. Accessed December 03, 2024. https://www.statista.com/statistics/1168627/metrics-useful-for-capturing-state-of-ir-automation-and-integration/
SANS Institute. (2020). Which metrics do you believe are useful for effectively capturing the state of incident response (IR) automation and integration? . Statista. Statista Inc.. Accessed: December 03, 2024. https://www.statista.com/statistics/1168627/metrics-useful-for-capturing-state-of-ir-automation-and-integration/
SANS Institute. "Which Metrics Do You Believe Are Useful for Effectively Capturing The State of Incident Response (Ir) Automation and Integration? ." Statista, Statista Inc., 14 May 2020, https://www.statista.com/statistics/1168627/metrics-useful-for-capturing-state-of-ir-automation-and-integration/
SANS Institute, Which metrics do you believe are useful for effectively capturing the state of incident response (IR) automation and integration? Statista, https://www.statista.com/statistics/1168627/metrics-useful-for-capturing-state-of-ir-automation-and-integration/ (last visited December 03, 2024)
Which metrics do you believe are useful for effectively capturing the state of incident response (IR) automation and integration? [Graph], SANS Institute, May 14, 2020. [Online]. Available: https://www.statista.com/statistics/1168627/metrics-useful-for-capturing-state-of-ir-automation-and-integration/
