Information overload is a key barrier to effective threat intelligence, says Mandiant

Getty Images

Approximately 50 percent of organisations have explained that applying threat intelligence all over their cyber security operations is 1 of the finest issues they at the moment confront.

New investigate from Mandiant showed that while an too much to handle majority of small business leaders (96%) are satisfied with the quality of threat intelligence their organisation is utilizing, correctly utilising risk intelligence nevertheless signifies a critical hurdle.  

This difficulty embedding risk intelligence within just security procedures is posing a severe risk to how organisations proactively mitigate threats even though traversing an progressively perilous threat landscape, the security business stated.

“A traditional, test-the-box mindset isn’t enough to defend in opposition to today’s very well-resourced and dynamic adversaries,” explained Sandra Joyce, VP for Mandiant intelligence at Google Cloud.

“Security groups are outwardly assured, but frequently struggle to continue to keep pace with the speedily transforming danger landscape. They crave actionable information that can be used during their organisation.”

Information overload 

A critical factor in the trouble professional by organisations trying to find to bolster their risk intelligence abilities is “information overload”, Mandiant warned.  

The heightened state of hazard currently permeating the global threat landscape implies that security teams are now forced to procedure a much larger quantity of data each and every day. 

More than one-third (38%) explained a crucial challenge was “knowing what to do with the information” they gathered, and as a consequence feel they could risk overlooking prospective threats. 

“A big the vast majority (84%) of respondents stated that they are anxious they may be lacking out on threats or incidents mainly because of the number of alerts and data they are faced with,” read through the report.

This data overload is also impacting specific personnel, with extra than two-thirds (69%) of security teams admitting they experience confused. 

James Collier, Mandiant senior menace intelligence advisor for Google Cloud, reported that the lingering issue of information and facts overflow is now a critical barrier for security teams.  

“One of the largest obstacles to making much better defences is the sheer volume of data organisations have to find superior methods for placing intelligence into motion to get back a great deal-needed focus and recognize obvious priorities,” he stated.  

“UK organisations have to have to set by themselves on the front foot, and that can only be realized by figuring out your adversaries,” Collier included. 

What is danger intelligence?

Threat intelligence is a approach which will involve the collecting and analysis of cyber security details to overcome emerging threats. It enables organisations to keep a single action in advance of more and more innovative risk actors.  

This enables security practitioners to detect traits in just the world menace landscape, these as the prevalence of precise attack methods, or the emergence of new malware strains, for illustration.

By accumulating menace intelligence, practitioners can superior comprehend risk actor motives, potential targets, and behaviours.

This being familiar with can aid security groups secure methods from known attack methodologies of nation-state attackers, avoiding attacks like ransomware, information breaches, and cyber espionage, among some others.

Mandiant’s report showed that small business leaders globally are now informed of the pros that danger intelligence features with regard to preventing long run security dangers.

96% of security leaders advised the business that it is “important to recognize which cyber threat actors could be targeting their organisation”.  

“The great importance of risk intelligence was effectively comprehended. A substantial majority of the respondents deemed it significant to establish the attacker (85%) the resources and approaches applied by the attacker (88%) and the attacker’s commitment (87%),” the report mentioned.

Even so, in spite of the “appreciation for thorough risk intelligence”, security teams revealed they frequently do not stick to by means of. Only 34% claimed they “always look at the source of a possible attack when tests cyber security defences and operations”.  

In addition, the report identified that security groups do not spend the requisite time on determining and acting on threats.  

“A significant bulk of respondents (79%) mentioned their organisation could concentration far more time and strength on pinpointing critical developments within just cyber security, even though just about all (98%) said they need to be speedier at utilizing improvements to their cyber security method primarily based on the latest threat intelligence.” 

Some components of this short article are sourced from:
www.itpro.co.uk