PORTLAND, Ore.--(BUSINESS WIRE)--Tripwire, Inc., a leading global provider of security and compliance solutions for enterprises and industrial organizations, today announced the results of an extensive Tripwire study conducted by Dimensional Research. The study evaluated the confidence of IT professionals regarding the efficacy of seven key security controls, which must be in place to quickly detect a cyber attack in progress. Study respondents included 763 IT professionals from various industries, including 101 participants from the health care sector.
Health care IT professionals participating in Tripwire’s study were overconfident in their ability to quickly collect the data needed to identify and remediate a cyber attack. For example, while less than half of the respondents (forty-nine percent) know exactly how long it would take their vulnerability scanning systems to generate an alert if unauthorized devices were detected on their networks, ninety percent believe they would be alerted within hours.
According to Verizon’s 2016 Data Breach Investigations Report, while sixty-three percent of successful system compromises in the health care industry occurred within minutes, fifty-six percent of data breaches impacting the health care sector took months to detect.
“There’s no argument that these basic controls work and contribute directly to an organization’s cyber security, yet the research shows they are not in place at enough health care organizations,” said Tim Erlin, senior director of IT security and risk strategy at Tripwire. “This is occurring at a time when the health care industry is facing unique cyber threats, from physical theft to sophisticated ransomware campaigns.”
Additional findings from the study included:
- Nearly two-thirds of the respondents (sixty percent) believe their automated tools do not pick up all of the critical details or information that is needed to identify the locations and departments where the unauthorized devices were detected.
- Eighty-three percent of the respondents believe they could detect configuration changes to a network device within hours; however, only fifty-four percent know how long the process would actually take.
- Nearly half of the respondents (forty-five percent) said critical vulnerabilities detected by their scanning tools are not fixed or remediated within 30 days.
- Forty-three percent of the respondents said less than eighty percent of patches succeed in a typical patch cycle.
Erlin continued: “The basics of finding unauthorized devices and vulnerabilities and applying patches in a timely manner should be done at every organization in order to create a baseline of cyber security. These fundamental controls should be in place before organizations look at the latest shiny security object.”
Tripwire’s study is based on seven key security controls required by a wide variety of compliance regulations, including PCI DSS, SOX, NERC CIP, MAS TRM, NIST 800-53, CIS Top 20 and IRS 1075. These controls also align with the United States Computer Emergency Readiness Team’s (US-CERT) recommendations and international guidance, such as the Australian Signals Directorate’s Strategies to Mitigate Targeted Cyber Intrusions.
The recommendations and guidance include:
- Accurate hardware inventory
- Accurate software inventory
- Continuous configuration management and hardening
- Comprehensive vulnerability management
- Patch management
- Log management
- Identity and access management
When implemented across an organization, these controls deliver specific, actionable information necessary to defend against the most pervasive and dangerous cyber attacks. It is vital for organizations to identify indicators of compromise quickly, so that appropriate action can be taken before any damage is done.
For more information on this study, please visit: http://www.tripwire.com/it-resources/are-healthcare-sector-it-pros-overconfident-in-data-breach-detection-skills1/
About Tripwire
Tripwire is a leading provider of security, compliance and IT operations solutions for enterprises, industrial organizations, service providers and government agencies. Tripwire solutions are based on high-fidelity asset visibility and deep endpoint intelligence combined with business context; together these solutions integrate and automate security and IT operations. Tripwire’s portfolio of enterprise-class solutions includes configuration and policy management, file integrity monitoring, vulnerability management, log management, and reporting and analytics. Learn more at tripwire.com, get security news, trends and insights at tripwire.com/blog or follow us on Twitter @TripwireInc.
