The Numbers Game: How Many Alerts is too Many to Handle?
This report details the survey results of all aspects of alert management – covering where alerts originate, how they’re categorized, and how they’re managed – and how the process can increase the likelihood of a breach being successful.
In a recent analysis of threat management, FireEye learned that large enterprise companies rely on security personnel to fulfill multiple roles and responsibilities – an expectation that can prove disastrous when it comes to finding and escalating a critical alert.
This special report is based on a worldwide survey conducted with large enterprises. The report contains statistics that clearly show security personnel at all levels face the unenviable task of wading through too much data, false alarms and duplicate alerts – which means the real risk isn’t only that attackers will breach a network … it’s that it won’t be discovered and dealt with in time. While security teams comb through mounds of noisy data and cull out many alerts, too many still need to be addressed at the upper levels, making an already cumbersome process virtually impossible to manage.
