Five Quick Wins from Verizon’s 2013 Data Breach Investigations Report
•Download as PPTX, PDF•
1 like•1,288 views
It’s that time of year again – new 2013 IT Security reports – trends, breach investigations, and more on 2012 data from Verizon, Symantec, Ponemon, Mandiant, PWC (focused on Europe) – and others have been published. In the interest of those of us with short attention spans, in this post I’ll focus on Verizon’s 2013 Data Breach Investigations Report™ (DBIR). Here are five “Quick Wins” (in SANS 20 Critical Security Controls (CSC) parlance) that CISOs/CIOs and their teams might want to take today, helping you to avoid being a participant in the 2014 IT Security reports.
Recommended
Recommended
More Related Content
More from Tripwire
More from Tripwire (20)
Recently uploaded
Recently uploaded (20)
Five Quick Wins from Verizon’s 2013 Data Breach Investigations Report
- 15. Foundational Security from Tripwire Risk-based security & compliance management Broadest set of foundational security controls Focused on the “first four” SANS 20; Cover 16 of 20 in total Security business intelligence with performance reporting and visualization to make better decisions
Editor's Notes
- This is a very anticipated and helpful annual breach investigations report, led by Verizon. It’s worth knowing that they’ve actually been investigating breaches and security incidents for 9 years, but the report has been formally done, in context of its VERIS methodology since 2008. VERIS stands for Vocabulary for Event Recording and Incident Sharing – a sort of ‘CVSS’ for normalizing security incident investigation – at least from Verizon’s point of view. The contributing investigations team were Verizon’s RISK team, Australian Federal Police, Dutch Nataional High Tech Crime Unit, Irish Reporting and Information Security Service, Police Centrale Crime Unit, and the United States Secret Service. A highly capable group.