[ISN] Security Monitoring An Elixir For Intrusion Costs?

http://www.darkreading.com/security-monitoring/167901086/security/security-management/240008880/security-monitoring-an-elixir-for-intrusion-costs.html

By Robert Lemos
Contributing Writer
Dark Reading
Oct 12, 2012

Companies that want to reduce the cost of detecting, responding and 
recovering from cyberattacks should invest in technologies designed to 
give businesses better visibility into the security of their networks 
and systems, according to a recent Ponemon Institute survey tallying the 
cost of cybercrime.

The 56 companies surveyed by the security research firm lost, on 
average, $8.9 million due to cyberattacks each year. The survey found 
that companies which detected attacks more slowly, incurred greater 
costs. In the 2012 survey, the surveyed companies needed 24 days on 
average to resolve a cyberattack, racking up a hefty bill of more than 
$590,000 per incident, 42 percent more than the previous year.

Little wonder then that technologies for monitoring and gaining 
intelligence on threats, called security intelligence in the report, 
correlated most strongly with a reduction in cybercrime costs.

"Some organizations seem to experience a lower cost, but not a zero 
cost, if they do certain things," says Larry Ponemon, chairman and 
founder of the survey firm. Security intelligence "is really important 
and helpful -- not only in the detection of the cybercrime -- but in the 
containment and ultimately remediation of the crime."

Companies that had deployed security information and event management 
(SIEM) systems or intrusion detection systems had, on average, $1.7 
million less in cybercrime costs, according to the Ponemon survey. 
Companies that had implemented access and identity management tools 
saved $1.6 million, and the deployment of tools to help with governance, 
regulation and compliance trimmed $1.5 million.

[...]


--
CISSP and CEH Live OnLine training with ExpandingSecurity.com is the fastest,
easiest way to master the relevant data you need now.  Sign up for the free
weekly PainPill and try a free class.  It is easy.
http://www.expandingsecurity.com/PainPill