How an organization can reduce cyber dwell time-converted

1. How an organization can reduce cyber dwell time? What is Dwell time in the cybersecurity world? Dwell time in cybersecurity means the period of time cyber criminals had access to your IT infra, with the power to exfiltrate data or to cause other damage they plan to do. It starts when an attacker enters your system and stays there till they leave themselves after performing the damage or you remove them. Therefore, Dwell Time is determined by adding Mean Time to Detect (MTTD) and Mean Time to Remediate (MTTR) and is usually measured in days. Nowadays, many of the pragmatic organizations have started believing that even after implementing the finest of the controls, cyberattacks can still occur anytime, and it is important to take preventive measures. Controls to prevent the cyber-attacks are important but they can’t be the only security tactic that you implement, and it is very important to focus on detection, containment & eradication strategies as well to reduce the dwell time and eventually the impact of the breach on your organization. According to the latest report by Mandiant, with adoption of advanced threat detection solutions, organizations continue to find and contain adversaries faster than in previous years. Over the past decade, there has been a marked reduction in median dwell time, from just over one year (2011) to just under one month (2020).

2. In 2020, the global median dwell time dropped below one month for the first time. Many organizations are now detecting incidents in only 24 days, more than twice as fast as 2019 While global median dwell time for incidents which were detected internally dropped to just 12 days, incidents with external notification sources came in at 73 days. Important point to note here is, these timings are average time and not the actual Dwell time for all the researched

3. organizations. Also the dwell time depends a lot on the cybersecurity maturity of an organization & the people, process & technologies in place to protect, detect & respond to cyber threats. Many organizations have detected the threats that were present in their environment for more than a year before being discovered. You may remain hopeful for a minimum dwell time because strict adherence to best practices of Cyber Security and tools may sooner or later detect the attacks present in the infrastructure but the time taken for the detection of the threats is a critical aspect for any organization. Dwell time is not just a benchmark. It’s a proactive security principle and ideology that drives unified change across all security operations to achieve a common objective. Minimize the opportunity for a threat actor to cause damage to your organization PLEASE VISIT US : https://www.cybersecknights.com/