McAfee has released a report called “Needle in a Datastack”

Jun 17, 2013 20:01 GMT  ·  By

According to a new study released by McAfee today, 35% of the 500 senior IT decision makers they’ve interviewed are confident that their companies can detect a security breach quickly.

The figures from the “Needle in a Datastack” report show that it takes 22% of companies one day to discover a breach. For 5% of those interviewed, it would take up to a week to detect a data breach.

On average, companies reported that it would take 10 hours to discover a security incident.

However, the study reveals that most organizations are overly confident in their security systems.

74% of companies claim they can identify an insider threat in real time, 78% of them claim they can identify perimeter threat, and 72% believe they can detect zero-day malware in real time.

However, of the 58% of organizations that suffered a data breach last year, only 24% of them identified it within minutes.

As far as the source of the breach is concerned, only 14% of organizations identified it in minutes. For 16% of them, it took more than a week to do that.

The fact that organizations are overly confident in their abilities is also highlighted by other reports. For instance, the “Post Breach Boom” study published in February by Solera shows that it takes a company 80 days to discover a breach.

“If you're in a fight, you need to know that while it's happening, not after the fact,” said Mike Fey, executive vice president and worldwide chief technology officer.

“This study has shown what we've long suspected -- that far too few organizations have real-time access to the simple question 'am I being breached?' Only by knowing this, can you stop it from happening.”

200 senior IT decision makers from the US and 100 each in the UK, Australia and Germany have taken part in the study.