Incident Response Life Cycle

One area where we definitely saw the impact of the pandemic and working from home (WFH) was the response timeline.

Detection

Occurrence to Discovery

The mean was 92 days for network intrusions compared to 70 in 2019 and a prior three-year mean of 87 days.

Containment

Discovery to Containment

The mean was 6 days for network intrusions compared to 10 days in 2019 and a prior three-year mean of 5 days.

Analysis

Engagement of Forensics to Completion

The mean was 42 days for network intrusions compared to 44 in 2019 and a prior three-year mean of 36 days.

Notification

Discovery to Notification

The mean was 90 days for network intrusions compared to 60 days in 2019 and a prior three-year mean of 49 days.


Response Timeline

(median data)

Share this page