SenSage Survey Findings Reveal Enterprise Security and Compliance Weaknesses

SAN FRANCISCO, May 5 /PRNewswire/ -- SenSage today announced the results of an industry survey on security management practices taken during last month's RSA Conference. The survey of 360 security professionals identifies several weaknesses in respondents' log management, compliance reporting, real-time monitoring, forensic investigation and incident response processes:

• Fifty-two percent involve only one or two groups in security management processes
• Fifty-eight percent report that their security management processes have no coordination or only reactive triage across teams
• Sixty-nine percent state that they do not consistently measure these processes for results

All of these weaknesses contribute to an alarming report card for security management. Addressing stakeholders' perceptions of the effectiveness of these processes, only 39 percent of respondents estimate they are perceived as "effective" or "very effective" whereas 61 percent estimate they are perceived as "ineffective" or "somewhat effective."

"Our survey reveals that many security management teams lack the coordination and planning necessary to adequately protect their organizations from increasingly complex cyber attacks," said Joe Gottlieb, vice president of marketing and business development at SenSage. "SenSage Security Intelligence solutions and services help enterprises consolidate and simplify their SIEM and log management processes and infrastructure, so that they are more effective for distributed personnel serving a variety of security and audit functions."

Other notable findings of the survey include:

• Forty-two percent of respondents utilize four or more different products to address their log management, compliance reporting, real-time monitoring, forensic investigation and incident response requirements
• A slight majority of respondents (53 percent) state that they consistently improve these processes; yet 66 percent state that these process improvement initiatives are understaffed

These survey findings indicate that the majority of today's security management efforts could be improved to be more effective against increasingly sophisticated cyber-threats. The SenSage Security Intelligence solution for unified SIEM, log management and forensic investigations strengthens organizations' ability to identify security threats before they become problems. It also helps streamline processes via a single console with role-based access that supports coordinated processes involving security policy planning, security operations, IT operations, risk management, audits and compliance teams. This unified approach helps companies train, coordinate and measure security management processes that must span multiple disciplines, departments and locations to be effective.

For more information, visit http://www.sensage.com/rsa2010/ to register for a webinar detailing the survey results and implications for the industry.

About the Survey

The RSA Conference is the world's largest information security industry conference, attracting thousands of professionals that are uniquely qualified to provide insights into the status of security within their organizations and across the information security marketplace. SenSage invited information security professionals visiting the SenSage booth at the show to respond to a questionnaire exploring the state of security management in their specific organizations. In all, 360 responses were collected.

About SenSage

SenSage®, Inc. delivers Security Intelligence solutions that provide essential decision support to cyber-security, risk management and compliance operations. These solutions enable the necessary convergence of security information and event management (SIEM), log management and continuous controls monitoring through a single console and data management architecture. Over 550 organizations and government agencies around the world rely upon SenSage to combine these functions in support of more holistic IT oversight, real-time alerting and investigation, incident response and compliance reporting. Combining a patented event data warehouse platform and interactive analytics environment, SenSage Security Intelligence solutions are more scalable, flexible and affordable than traditional SIEM, log management and data warehouse point products. SenSage goes to market with industry-leading OEMs and strategic alliance partners including Cerner, Cisco, EMC, HP, McAfee and SAP. Visit www.SenSage.com for more information.

SOURCE SenSage, Inc.