New research from Cyber Defense Group highlights a significant gap in organizations' confidence regarding their ability to contain cyberattacks and preserve critical evidence. While a majority of IT leaders express strong confidence in containing incidents within 24 hours, a considerably smaller percentage feel the same assurance about their capacity to safeguard crucial evidence, with further coverage provided by Channel Insider.
The Cybersecurity Strategy Insights Report 2026-2027 found that while 94% of organizations have some confidence in containing a security incident within 24 hours, only 60% are very confident. This confidence diminishes further when it comes to other critical response tasks, with less than half very confident in stakeholder communication and only 37% in preserving evidence. Failing to preserve evidence can hinder the determination of cause, scope, and regulatory exposure, while inconsistent communication complicates legal and recovery decisions.
The report also indicates that only 68% of organizations have documented and communicated their internal approach to cybersecurity risk management, and just 44% for their external approach. This presents an opportunity for MSPs and MSSPs to assist clients in evaluating their readiness across the entire response process, pressure-testing systems, documenting procedures, and clarifying responsibilities to demonstrate robust incident response capabilities.
Source: Channel Insider
