Do you have the capability to respond to an attack before it escalates to a major incident?

 

Build resilience and move from reacting to individual security problems to a proactive, outcome-based approach.

Despite heavy investment in cyber security, organizations continue to face challenges in the battle against attackers – who continue to adapt constantly. Organizations that lack the capability to respond to an attack before it causes business impact have what we define as a Response Gap.

Are you interested in finding out the risk level of your threat detection and incident response capabilities as an organization?

Take a short risk assessment and get a tailored report about your risk levels - with practical recommendations how you can develop your capabilities and processes.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply

WithSecure © 2025

Any data shared is processed in accordance with WithSecure's Privacy policy

In which industry does your organization operate?

 

Automotive
Communications
Consumer Goods
Education
Energy & Utilities
Financial Services
Government
Healthcare & Life Sciences
Manufacturing
Media
Nonprofit
Retail
Technology
Travel Transportation & Hospitality

How many employees work in your organization?

 

1-99
100-499
500-999
1000-4999
5000-9999
10000-49999

Which statement best describes your company's understanding of company assets and associated vulnerabilities?

 

Poor visibility of assets, reactive vulnerability scanning and patching
Asset register but not actively maintained, no proactive scanning or risk management
Actively maintained asset register with associated vulnerability scanning and patch management regime
Proactive scanning of entire attack surface (internal and external) linked to asset register and risks. Processes in place for newly created assets

How often do you re-evaluate the threat landscape and risks to your organization and/or industry? (select only one)

 

Continuous Process
Monthly / Quarterly
Yearly
When an incident happens
Not sure

Which of these describes your security operations team & resourcing capabilities the best?

 

In-house security team operating during business hours
In-house security team operating 24/7
Outsourced to partner operated security team operating during business hours
Outsourced to partner operated security team operating 24/7
No assigned security team

Do you think the team is sufficiently resourced and experienced?

 

Yes
No

What kind of threat detection tooling you are currently using? (select all that apply)

 

Network sensors / Network Detection and Response (NDR)
Endpoint Detection and Response (EDR)
Extended Detection and Response (XDR)
Managed Detection and Response (MDR)
SIEM / Centralized Log management
None / I don't know

Which of these best describes your operating model and capability to respond to threats and incidents? (select only one)

 

We are lacking good visibility of our estate to detect threats
We have visibility but we are not actively acting on all alerts
We get reactive alerts from our tooling and act on all alerts
We get reactive alerts from our tooling and act on all alerts. We also proactively hunt threats in our estate
We get reactive alerts from our tooling and act on all alerts. We also proactively hunt threats in our estate. We are using playbooks and automation to support incident management

Which of these response capabilities are part of your threat detection tooling? (select all that apply)

 

Coordinating
Collecting forensic evidence
Disrupting and containing the attack
Analyzing forensic evidence (for example memory dumps and malware)
Cleaning up the environment from attacker artefacts (for example persistence mechanisms)
None

Are you using an Incident Response Readiness (IRR) service that helps you build your IR readiness capabilities? (select only one)

 

Yes, a dedicated IRR partner
Yes, part of our MDR service
No, but we internally practise and document our processes continuously
No
Not sure

How do you manage Incident Response (IR) / Digital Forensics & Incident Response (DFIR) enabling rapid support during incidents? (select only one)

 

Service from a dedicated partner with Incident Response retainer (pre-purchased)
As a part of our MDR service
Handled by internal team
Request help from IR providers on need basis
No IR/DFIR capabilities
Not sure

Which of these are part of your business continuity and incident readiness capabilities & processes? (select all that apply)

 

Incident Response Plan
Crisis management plan
Contingency plan for critical applications
Regular attack simulation exercises
First responder training
Not sure about our capabilities

In order to receive a personalized report and our guidance, please fill in your contact details

 

Country *
State *
I would like to receive emails and equivalent communications from Withsecure, including newsletters, event invitations, offers and product-related information. We process the personal data you share with us in accordance with our Corporate Business Privacy Policy.

Your Identify Response Gap Assessment is now completed

 

Send report to email