{"id":18579,"date":"2021-09-13T08:44:41","date_gmt":"2021-09-13T08:44:41","guid":{"rendered":"https:\/\/easydmarc.com\/blog\/?p=18579"},"modified":"2023-04-28T08:58:25","modified_gmt":"2023-04-28T08:58:25","slug":"splunk-state-of-security-report-review","status":"publish","type":"post","link":"https:\/\/easydmarc.com\/blog\/splunk-state-of-security-report-review\/","title":{"rendered":"Splunk State of Security Report Review"},"content":{"rendered":"

Splunk is the world\u2019s first Data-to-Everything\u2122 Platform designed to remove the barriers between data and action, so that everyone thrives in the Data Age. They help IT, DevOps and security teams to transform their organizations with data from any source and on any timescale.<\/span><\/p>\n

Splunk has released its inaugural <\/span>State of Security Report<\/span><\/a>, and its insights are promising. The report was based on a survey with 535 security leaders from across the globe to provide some interesting findings that may change how we think about our data protection strategies going forward.<\/span><\/p>\n

Splunk report in Numbers<\/span><\/h2>\n

84% of organizations have suffered at least one significant incident in the past two years; email compromise is leading the way (42%), followed by phishing scams (33%).  78% are concerned about more SolarWinds-style attacks in the future – but only 23% have reassessed their current strategy for dealing with them!<\/span><\/p>\n

88% of respondents are deploying or planning to deploy ML for security. 41% said that Cloud Security<\/a> would be their priority, with 12% saying they will focus on Identity Management and nothing mentioned about email protection.<\/span><\/p>\n

What can we learn from the Splunk Report<\/span><\/h2>\n

Splunk shared some solid recommendations that we encourage you to review. These include: <\/span><\/p>\n

    \n
  1. \n
      \n
    1. Modernize the Security Operations Center<\/b>,  including zero trust and security operations automation processes, modern SIEM systems and most importantly staff training and awareness.<\/span><\/li>\n
    2. Set your sights on a consolidated view of data<\/b> that creates a single source of true and trusted information for IT and security teams <\/span><\/li>\n
    3. Rethink your approach to supply chain threats<\/b> and improve your ability to see suspicious lateral movement within your networks. Implement a well-defined and closely monitored identity policy with strong enforcement and monitoring.<\/span><\/li>\n
    4. Press your collaborative advantage and  advocate for the importance of integrated security thinking, at every stage of IT and the business. <\/span><\/b><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

      Some additional suggestions from EasyDMARC are below:<\/span><\/p>\n

      Have a comprehensive email security strategy that includes:<\/span><\/p>\n