Intelligent CISO Issue 14 | Page 18

cyber trends A FIREEYE REPORT HAS REVEALED BOTH GOOD AND BAD NEWS ABOUT EMERGING CYBERSECURITY TRENDS. MOHAMMED ABUKHATER, VICE PRESIDENT – MEA AT FIREEYE, GIVES US THE LOWDOWN ON DECREASING DETECTION TIMES, EVOLVING THREATS FROM NATION- STATES AND INCREASED ATTACKS DURING M&A ACTIVITY. E arlier this year, FireEye, the intelligence-led security company, released the Mandiant M-Trends 2019 Report. The report shares statistics and insights gleaned from Mandiant investigations around the globe in 2018. We spoke to Mohammed Abukhater, Vice President – MEA at FireEye, to find out more about the report and its findings. Report reveals positive and negative trends The report says in 2018 the median duration between the start of an intrusion and its identification by an internal team was 57.5 days. This has been decreasing in recent times. Why is this? to detect and contain a breach?’ I see the decrease (in time taken to detect a breach) as the biggest positive in our M-Trends Report for the past year. The other fact we need to highlight is 60% of the breaches were discovered by internal teams rather than external ones. There has been a shift from 2011 year on year. You can see there has been a big increase in terms of detection by the internal team. The dwell time usually is a sign where we ask ‘is this organisation mature enough This could be related to many reasons, one is the increase in the maturity of 18 organisations for different aspects; one being in terms of process – they have enhanced their processes in terms of handling breaches. Another factor is the investment in talent. More organisations tend to hire talented resources who specialise in cybersecurity. Some of the countries in the Gulf area tend to hire local or national resources to keep the confidentiality of the data and they have invested heavily since the beginning of 2018 in training their local nationals. Issue 14 | www.intelligentciso.com