Intelligent CISO Issue 27 | Page 13

news New SOC research reveals security teams overconfident in detecting cyberthreats also fielded to determine how analysts and SOC management view key aspects of their operations, hiring and staffing, retention, technologies, training and funding. xabeam, a Smarter SIEM E company, has released its annual 2020 State of the SOC Report, examining the processes and effectiveness of corporate Security Operations Centres (SOCs). This year’s study reveals that 82% of SOCs are confident in the ability to detect cyberthreats, despite just 22% of frontline workers tracking mean time to detection (MTTD), which helps determine hacker dwell time. Compounding this unfounded confidence, 40% of organisations still struggle with SOC staff shortages and finding qualified people to fill the cybersecurity skills gap. The survey, conducted among 295 respondents across the US, the UK, Canada, Germany and Australia, was “From 2018–2019, we learned that dwell time – or the time between when a compromise first occurs and when it is first detected – has grown. Based on this, it is surprising for SOCs to report such inflated confidence in detecting cyberthreats,” said Steve Moore, Chief Security Strategist at Exabeam. “We see great progress in the SOC with attention paid to employee well-being, measures for better communication and more. However, disparate perceptions of the SOCs’ effectiveness could be dangerously interpreted by the C-suite as assurances that the company is well protected and secure, when it’s not.” MCAFEE REVOLUTIONISES ITS ENDPOINT SECURITY PLATFORM cAfee, a device-to-cloud M cybersecurity company, has announced the general availability of McAfee MVISION Insights, the industry’s first proactive security solution that changes the cybersecurity paradigm by helping to stop threats before the attack. MVISION Insights provides actionable and preemptive threat intelligence by leveraging McAfee’s cutting-edge threat research, augmented with sophisticated Artificial Intelligence (AI) applied to real time threat telemetry streamed from over one billion sensors. The integration of MVISION Insights significantly enhances the capabilities of McAfee’s awardwinning endpoint security platform by managing the attack surface, preventing ransomware and aiding security teams to easily investigate and respond to advanced attacks. According to recent internal research by McAfee, over 90% of security teams feel that they are not proactively prepared for the emerging threat landscape. While there is a plethora of threat intelligence feeds available in the market, actionable and contextual threat intelligence is hard to find. Additionally, multiple siloed endpoint security tools are tiring down security teams who are struggling to enable their organisations to safely adopt the cloud for Digital Transformation. The integration of MVISION Insights into McAfee’s endpoint security platform is designed to eliminate some of the burden on security operations professionals. Ash Kulkarni, Executive Vice President and Chief Product Officer of the Enterprise Business Group at McAfee, said: “Our latest endpoint security innovation, MVISION Insights, delivers the industry’s first actionable threat intelligence so organisations can preempt an attack rather than scramble to contain a breach.” u www.intelligentciso.com | Issue 27 13