Overview
- Based on a Censuswide survey of 1,500 IT and security professionals across 10 countries, 52% of organizations were targeted on holidays or weekends.
- Seventy-eight percent of companies reported cutting SOC staffing by at least half during those periods, and 6% said they stood down SOCs entirely.
- Sixty percent of recorded attacks followed material corporate events such as IPOs, mergers and acquisitions, or layoffs.
- Identity threat programs skew toward finding issues, with 90% detecting identity vulnerabilities but only 45% including remediation and 63% automating recovery.
- Healthcare respondents reported 47% of attacks on a weekend or holiday and 73% cutting off-hours SOC staffing by 50% or more, echoing years of CISA warnings.