Companies often struggle with how to respond to cybersecurity incidents. According to one recent poll, only three out of five organizations have an incident response plan in place, and only around a third do regular drills to ensure that their plans remain effective.<\/p>\n
The consequences of poor incident response are costly. The International Monetary Fund estimates that cyberattacks will cost the world more than $23 trillion by 2027, up from roughly $8.4 trillion in 2022.<\/p>\n
It\u2019s against this backdrop that Amazon sensed an opportunity. Today, Amazon Web Services (AWS), the company\u2019s cloud computing division, launched AWS Security Incident Response, a service that aims to reduce the time it takes for a business to recover from a cyberattack .<\/p>\n
Hart Rossman, VP of global services security at AWS, told TechCrunch that the new service is designed to help security teams combat account takeovers, breaches, ransomware attacks, and other corporate intrusions along these lines.<\/p>\n
\u201cWe\u2019ve received feedback from customers that implementing effective security incident response programs is challenging due to a reliance on various tools, services, and people that are difficult to scale as organizations and business needs evolve,\u201d he said. \u201cAWS Security Incident Response can now be used as a [\u2026] single source of truth for security incident response.\u201d<\/p>\n
AWS Security Incident Response automatically triages \ufb01ndings from Amazon GuardDuty, Amazon\u2019s threat detection service, and supported third-party cybersecurity tools. From a dashboard with integrated messaging and data transfer modules, customers can adjust the alert settings and account permissioning, and review active incidents, historical data, and metrics like the average time it takes to resolve an incident.<\/p>\n