2023 State of Enterprise Digital Forensics and Incident Response

The third annual State of Enterprise Digital Forensics and Incident Response report provides intelligence tailored to the needs and planning horizons of enterprise DFIR decision-makers — particularly those involved with IT, cybersecurity, and governance.

Drawing upon a comprehensive survey of domain experts, the report explores: 

• The evolving nature of enterprise digital forensics and incident response (DFIR), as companies shift resources to address attacks from motivated, skilled, and well-resourced threat actors 
• The wide range of challenges facing today’s enterprise DFIR professionals, from the sheer volume of data and investigations to issues relating to people, processes, and technology 
• What DFIR leaders can do to improve effectiveness and efficiency in both the short and long term, while ensuring experts have the resources and support they need to meet the organization’s goals 

— 

“The increasing sophistication of TTPs requires a more sophisticated response. As defenders of the organization, the profile of the incident responder and forensic investigator has increased as they are responsible for uncovering root cause and definitively remediating vulnerabilities.” 

Dean Turner, Vice President, Product Management, Private Sector