# Companies Worldwide Struggle with Visibility in Defending Against Cyberattacks
## Introduction
A recent study conducted by International Data Corporation (IDC) and cybersecurity company Exabeam has revealed that companies globally are facing challenges in maintaining visibility when it comes to defending against cyberattacks. The study highlights significant gaps in security measures and sheds light on the struggles faced by organizations in dealing with security incidents.
## Lack of Visibility in Security Operations
According to the study, 57% of surveyed companies experienced significant security incidents in the past year, requiring additional resources for remediation. The research shows that dedicated but overburdened security teams lack key automated threat detection, investigation, and response (TDIR) resources, leading to program gaps. Regions like North America, Western Europe, and Asia Pacific and Japan have reported high rates of security incidents, emphasizing the need for improved visibility in security operations.
## Contradictions in Security Measures
Despite organizations reporting better performance on cybersecurity key performance indicators (KPIs), such as mean time to detect, investigate, respond, and remediate, there is a significant gap between self-reported security measures and reality. The study reveals inflated confidence levels among organizations, creating a false sense of security. The lack of complete TDIR automation capabilities and full visibility may explain the discrepancies in security measures.
## Challenges in TDIR Automation
The study also highlights that more than half of global organizations have automated 50% or less of their TDIR workflow, leading to increased time spent on TDIR activities. While respondents express a desire for strong TDIR platforms with automation capabilities, hesitation to automate remains a challenge. Organizations need to overcome their reluctance to automate remediation to keep pace with the increasing speed of cyberattacks.
## Future TDIR Needs and Solutions
Looking ahead, organizations express the need for third-party assistance in managing threat detection and response, as handling it entirely on their own poses challenges. There is a growing demand for TDIR solutions equipped with automation and AI-driven security tools to improve understanding of normal user behavior and enhance threat prioritization. AI-driven automation is expected to play a crucial role in improving security metrics and team morale in the coming years.
## Key Points:
– Organizations globally struggle with visibility in defending against cyberattacks.
– Contradictions exist in self-reported security measures and actual security incidents.
– TDIR automation lags in many organizations, leading to increased time spent on security operations.
– Future TDIR needs include third-party assistance, AI-driven automation, and improved understanding of user behavior.
– AI-powered features are expected to be in high demand in 2024 and beyond.
In conclusion, the study highlights the urgent need for organizations to enhance visibility and automation in their security operations to effectively defend against cyber threats. Improved TDIR processes, AI-driven automation, and third-party assistance are key areas for organizations to focus on to strengthen their cybersecurity posture in the face of evolving threats.