This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
IDC Research Quantifies The Business Value of Proactive Threat Intelligence
By: Ariella Robison
VP of Marketing
There is an increasing chasm between the number of qualified cybersecurity professionals and the number of people needed to fill those roles. At DomainTools, we strive to address this challenge by offering context-rich threat intelligence solutions. Our offerings involve using indicators, including domains and IP addresses, to develop risk assessments, profile attackers, guide investigations, and map cyber activity to attacker infrastructure. Security analysts depend on our investigation platform and machine-learning based risk score to help them prioritize threats which greatly improves their efficiency. We also provide ongoing monitoring of malicious activity in DNS which allows our customers to predict and prevent threats.
We recently partnered with IDC Research to conduct a study on the business value of our proactive threat intelligence for several of our key customers. The results are summarized below:
- 19% lower chance of major security events
- 313% average 3-year ROI
- 5 months to payback
Threat Intelligence Team Efficiencies
- 34% more efficient, overall threat investigation team
- 28% more efficient, incident management teams
- 24% more efficient, security analyst teams
- 45% more efficient, other threat investigation team members
Improved Threat Intelligence Capabilities
- Almost 3x more security threats identified
- 82% faster to identify security threats
- 42% fewer impactful security events
On threat intelligence efficiencies:
"With DomainTools, we need 10% of the 50 people for threat assessment. If we didn't have Domain Tools, we probably wouldn't do it at all. But if we had to do it, it would probably be at least 50% of the 50 people."
On delivering proactive intelligence:
"The most significant operational benefit of using DomainTools is being able to expose threat actor infrastructure and then taking that reactive information and turning it into proactive intelligence."
On avoiding impactful security events:
"With DomainTools, we’re able to identify malicious activities sooner and respond to it before business or operational risk occurs and prevent the impact connected with a security incident. And so that means that we avoid these impactful security incidents."