2023 Survey Event | Incident Response

Incident response (IR) capabilities play a major role in an organization’s security posture. IR teams’ capabilities determine how well organizations respond to an event when a threat actor strikes. The SANS 2023 Incident Response survey examined the tools, processes, and people involved in IR.

This webcast will explore rising technologies, response and recovery times, and employment trends in the industry. In addition, gathered data will be compared to results from previous years’ surveys to identify trends and changes in the industry.
Specific topics covered include:

  • How long are organizations taking to identify, respond to, and remediate incidents?
  • What technologies are most useful in supporting incident response teams?
  • How are organizations supporting their IR staff?

Register for this webcast now and be among the first to receive the companion whitepaper from SANS authors Megan Roddie and Terrence Williams.

Join the SANS Analyst Program interactive Slack workspace and you can connect live with SANS authors and Sponsor speakers, have a chance to win prizes, and network with fellow attendees.


One lucky attendee will be chosen to receive a $100 Amazon gift card to virtually shop your heart out. Save your seat for a chance to win!


Thank You to Our Sponsors


Timeline (EDT)

Session Details


SANS 2023 Incident Response Survey Results

SANS authors Megan Roddie and Terrence Williams share insights and analysis of our 2023 IR Survey.

Megan Roddie Course Author, SANS

Terrence Williams Certified Instructor Candidate, SANS


Thinking Outside the Box to Accelerate IR

The 2023 SANS IR Survey results show that automation, hiring and training are the top IR improvements organizations plan to make in the next 12 months, but what if you don't have the budget to substantially increase your investments in those areas? This presentation, by Corelight Sr. Director of Product Marketing John Gamble, will cover cost effective alternative strategies ranging from open source to generative AI tools that can teams force multiply their current talent pool and technology capabilities.

John Gamble Sr. Director of Product Marketing, Corelight


Firemen Run into Fire: Firefighting the Effects of Threats, Staffing, and Budgets

Security Operations have undergone an operational and cultural change with the rapid transition to remote and hybrid work practices. This increased threat space has yet to receive a corresponding increase in budget, as shown in the SANS Incident Response survey. In this session, Jon Garside, Devo's Senior Director of Product Marketing, will discuss the critical data in the report, contrasting his previous experience as a Security Officer for ObamaCare California.

Jon Garside vCISO, Devo


Survey Panel Discussion

Megan and Terrence will lead a conversation with John and Jon while answering questions from attendees.