Enterprise Strategy Group | Getting to the bigger truth.™

Deploying Extended Detection
and Response (XDR) Platforms
for Threat Management
Examining Potential Options

Cyber-risks are Increasing
According to ESG research, 82% of organizations believe that cyber-risk has increased over the past 2 years. This increase isdue to factors like an increase in cyber-threats, greater dependence on IT for fulfilling business mission, and an increase in theamount of assets on the attack surface.

82+18+U82%

believe cyber-risk has increased
over the past 2 years.

Corporate Boards Are Becoming More Engaged
with Cybersecurity
Aside from spending trends, board members want to be updated about the status of cybersecurity projects and any specificattack campaigns aimed at their industry or organization.

85+15+U85%

of security and business professionals claim that
their board of directors is more engaged in cybersecurity
status, decisions, and strategy than it was 2 years ago.

Threat Detection and Response Challenges
Improving cyber-risk management demands that organizations make progress with threat detection and response.
Unfortunately, there’s a lot of work to be done as organizations have lots of challenges in this area. This data indicates thatprocesses and technology changes are needed.

31%

29%

23%

22%

We spend most of our time
addressing high priority/emergency threats

We have “blind spots” on
our network due to inability
to deploy agents

It’s difficult to correlate
and combine data fromdifferent security controls

It is difficult to track/measureprogress throughout thelifecycle of security incidents‘Platform’ Adoption
To alleviate threat detection and response technology complexity, many organizations are contemplating replacing standalone
security point tools with integrated multi-product “platforms.” This raises the question, however, just what is a cybersecurity
technology platform.

67%

of security professionals say that a cybersecurity “platform”
is offered as an agreed-upon, standard architecture provided
as an OPEN suite of products integrated through standard
APIs and development tools.

Platform proliferation is already happening.

70%of organizations have deployed, are planning to deploy, or are
considering deploying an extended detection and response(XDR) platform for threat management.

Important Attributes of a Threat Detection & Response Platform
As organizations eschew threat management point tools, they have a list of specific requirements for threat detection
and response platforms.

42%

35%

30%

21%

Coverage across theentire attack surface

Central management
and reporting across all
products and services

Security analytics(i.e., collective analysisof product data)

Extensible and open architecture(i.e. provide incremental value toexisting security technologies like
EDR, SIEM, etc.)

XDR Priorities

42%

38%

31%

Simplified visualization ofcomplex attacks and understandingof how they progress

Advanced analytics that candetect and identify modern,sophisticated attacks

Automated response
capabilities that can help blockattacks in progress

Read more about Open XDR and SIEMs

GET THE REPORTSources:

ESG Research Report, Cybersecurity in the C-Suite and Boardroom, February 2021.
ESG Master Survey Results, The Impact of XDR in the Modern SOC, February 2021.
ESG Research Report, General Cybersecurity Process and Technology Trends, to be published.
© 2022 TechTarget, Inc. All Rights Reserved.

We are Open XDR