Cloud Incident Response

  • 1.  2020 SANS Enterprise Cloud Incident Response Survey Results

    Posted Sep 17, 2020 12:07:00 PM

    SANS presented earlier this week ( 15 September) their CIR Survey Results:

    "Our 2020 Enterprise Cloud Incident Response Survey investigated the data sources and services that organizations are leveraging to detect, respond to and remediate incidents in the multi-cloud world. This report on the survey focuses less on which cloud service organizations are using, and more on what data sources they are taking advantage of, what services they find useful, and what methods are working in their programs."

    You can review the webcast here (SANS account mandatory): https://www.sans.org/webcasts/2020-enterprise-cloud-incident-response-survey-results-114635  or review the white paper here in SANS Reading Room : https://www.sans.org/reading-room/whitepapers/analyst/membership/39805


    For your convenience I've attached the webcast slides and the survey results.
    Some interesting points to take along when completing our second deliverable if you'd ask me (CIR FW)!



    ------------------------------
    Saan Vandendriessche CCSP | CISSP | CRISC
    Cyber Security Manager
    Deloitte
    Brussels
    ------------------------------


  • 2.  RE: 2020 SANS Enterprise Cloud Incident Response Survey Results

    Posted Sep 18, 2020 12:16:00 AM
    Hi,

    Looking forward to your and everyone's participation and input into the CIR.

    ------------------------------
    Michael Roza CPA, CISA, CIA, MBA, Exec MBA
    ------------------------------



  • 3.  RE: 2020 SANS Enterprise Cloud Incident Response Survey Results

    Posted Sep 18, 2020 07:39:00 AM
    Thanks for the info, very interesting responses. I was surprised by the list of components that were involved in breaches and the cloud resources that are targeted.

    ------------------------------
    Derrick Thomas
    Security Engineer
    Amgen
    ------------------------------