Report

February 2002

• 60% of firms don't know what security incidents cost them.
• Without funding, IT staff assemble ad hoc response teams.

• Experts discovered 30 new vulnerabilities per week in 2001.
• Firms must collect hard data to break incident response's vicious cycle of underfunding.
• Firms can build effective incident response for just $98,000.

• Consultants must partner with cyber-risk insurers.

• Security personnel's marriages founder.

• Figure 1.  System Outages Cause Serious Business Disruptions
• Figure 2.  Firms Can't Quantify Incident Response Costs
• Figure 3.  Few Firms Budget For Incident Response
• Figure 4.  Incident Response Teams Are Internal, Ad Hoc, And IT-Centric
• Figure 5.  Model: Collecting Incident Response Data
• Figure 6.  The Virtuous Cycle Of Incident Response
• Figure 7.  Model: The Cost Of Incident Response

 

• Online Resources
• Companies Interviewed For This Report
• Related Research

• Asia gives good SIs a bad name.
• There will be no credit for "The dog ate my password."
• Geeks in love.
• OK, that's just creepy.