Top 5 Reasons IR Has Worsened in Last Two Years

I recently joined Phantom because I saw the opportunity to affect a trend in the industry that shows no sign of abating: security teams simply can’t keep up anymore.

The telltale signs of this issue are everywhere, including a research project Phantom just finished with the Enterprise Strategy Group (ESG) where we surveyed IT and cybersecurity professionals with knowledge of or responsibility for incident response processes and technologies at their organizations  (Download the full report).

In one question, we asked participants why Incident Response has become more difficult over the past two years.  While I’m not surprised by the responses, it’s interesting to see that the top five responses are equally challenging, for the most part:

ESG Fig 1

Security teams are deluged in nearly every way possible.  More stuff on the network means more traffic to inspect.  More security products mean more devices to manage and alert traffic to analyze.  More incidents mean more specialized skills needed to address to respond and remediate.

It just isn’t possible to address this challenge without automation & orchestration.  Our adversaries are using it against us, should we use it too?

If you are Interested in seeing how Phantom can help your organization address challenges like those identified in the research project, get the free Phantom Community Edition, and attend one of our Tech Sessions.

Russell Hubby
Region Sales Manager

About Phantom

Phantom, an award-winning company, automates and orchestrates key stages of security operations from prevention to triage and resolution; delivering dramatic increases in productivity and effectiveness. Ranging from simple automation to fully autonomous response, Phantom lets you choose the best balance that fits your organization’s needs while increasing security and accelerating security operations. Focused on closing the security gap by enabling enterprise security operations to be smarter, faster and stronger; Phantom provides the flexibility to connect in-house and third-party systems into one consolidated, integrated and extensible platform. Phantom was founded by enterprise security veterans Oliver Friedrichs and Sourabh Satish who have helped propel companies like Symantec, Sourcefire, Cisco and others to success. For more information visit:


One thought on “Top 5 Reasons IR Has Worsened in Last Two Years

Comments are closed.