The SANS Institute has published findings from its 2024 Detection & Response Survey, offering critical insights into how organizations are adapting their cybersecurity operations amid evolving challenges in cloud security, automation, and budget constraints.
Key findings include:
Cloud detection challenges
The survey reveals that 56% of respondents cite limited cloud security expertise as a significant challenge, while 51% point to the complexities of managing multi-cloud environments. These challenges underscore the need for specialized knowledge and tools to detect and respond to threats in diverse cloud settings effectively.
High rates of false positives
A significant 64% of respondents identify false positives as a major issue in threat detection, with 42% encountering them frequently (in 41-80% of cases). High levels of false positives can overwhelm security teams, leading to alert fatigue and potentially causing real threats to be overlooked.
Budget constraints impacting cybersecurity
Despite the increasing awareness of the importance of cybersecurity, 47% of respondents rank budget constraints as the top obstacle to maintaining effective detection and response capabilities. Financial limitations often hinder the adoption of advanced tools and technologies necessary to combat emerging threats.
Automation as a growing trend
The survey indicates that 64% of organizations have integrated automated response mechanisms, but only 16% have fully automated processes. This finding underscores a shift towards automation in threat detection and response.
