Research · Practitioner pulse
What readers actually do
Some Guidance questions ask readers one thing about their own practice. Here are the answers so far, beside the default the CISO Times pack recommends. A pack default is a starting point, not a norm: where most readers do something else, that is worth knowing.
What deadline do you set to fix a Priority 1 finding: one that is being exploited and can be reached from the internet?
Asked on How do we set remediation deadlines the business will actually agree to?
Loading the results…
How often does your team meet to triage new vulnerability findings?
Asked on When is weekly triage necessary, and when is fortnightly enough?
Loading the results…
When does a vulnerability finding count as closed in your process?
Asked on When is a finding closed: when the patch is applied, or when a rescan confirms it?
Loading the results…
How often does the board you report to receive a cyber report?
Asked on When does the board need a cyber update, and how often?
Loading the results…
In the incident plans you work with, who is named to decide on a ransom demand?
Asked on Who decides whether to pay a ransom?
Loading the results…
How these results are made, and what they are not
- We don't ask who you are or where you work. Each answer adds one to the count for the option chosen; no account, IP address or organisation is kept with it, and no answer is stored on its own.
- A result shows only once its question has 100 answers. Below that, it says there are not enough answers yet.
- Repeat answers from the same browser are discouraged, not prevented: the browser remembers for 30 days that it answered, not which option. Treat the results as indicative.
- The sample is the readers who chose to answer, not a survey of the profession, and it is not a benchmark for any sector or size of organisation.