Looking to create a data-informed information security program? A number of annual reports provide statistics by industry, type of threat, and more. Here are some reports to consider when looking to better understand the threat landscape:
IBM Cost of a Data Breach Report
US and International cost and causes related to data breaches. View report statistics for average cost, mean time to detect, and mean time to contain a data breach. Also includes statistics related to attack vectors.
Verizon Data Breach Investigations Report
Analysis of data breaches internationally, including attack vectors. Includes industry-specific statistics such as the Education and Public Services sectors.
SANS Security Awareness Report
Workforce security culture-related statistics, looking at the human element of cybersecurity.
CrowdStrike Global Threat Report
Details about the organizations who perpetrate threats, attack vectors, and exploited vulnerabilities.
National Cybersecurity Alliance: Annual Cybersecurity Attitudes and Behaviors Report
Statistics on user training, user experiences with cyber threats, and user behavior related to cybersecurity.
Utilizing statistics from reports such as these may aid in organizational understanding of threats, cost and behaviors, to guide security planning and assist with education and awareness programs.