New evidence-based risk management service
To help enterprises analyze the effectiveness of their data security measures and determine whether they need to be strengthened, Verizon is offering a new evidence-based risk management service that takes the guesswork out of security decision making while putting to work the insight gained from Verizon’s Data Breach Investigations Report (DBIR) series.
The offering, Incident Analytics Service (IAS), enables customers to describe, track, analyze and benchmark data breach incident metrics via a Web application that provides access to data from Verizon’s historical and ongoing incident analysis research, one of the largest information risk repositories in the world.
Sources of this data include the anonymous and aggregated data from all IAS participants; Verizon’s annual “Data Breach Investigations Report;” and information shared freely through the Verizon Enterprise Risk and Incident Sharing (VERIS) application.
The application is a repository for information collected from security incidents that are voluntarily and anonymously reported by participating organizations.
IAS can help enterprises strengthen their security posture, improve risk-management planning and better allocate resources while prioritizing security initiatives based on risk reduction and cost effectiveness. The new service also helps enterprises better understand how their security posture stacks up against peers by providing anonymous benchmarking information on peer security incidents, losses, controls and security spending.
For example, users can review actual information to determine whether they have more or less incidents on average than their peers, or how their incidents differ from their peers in nature or magnitude. Based on this information users can determine what is the optimal short-term and long-term remediation strategy to meet security goals.
Delivered as software-as-a-service, IAS provides customers with timely risk information via its online dashboard, where users can quickly access historical data, as well as analysis, reporting, trending and peer benchmarking information.