SANS 2025 Detection and Response Survey Findings

The SANS 2025 Detection and Response Survey provides a comprehensive analysis of how organizations are adapting their cybersecurity operations in response to increasing complexity and resource limitations. The survey captures insights from a diverse participant base across various sectors, including banking, technology, and healthcare. Key findings indicate that cloud security expertise is lagging behind the rapid adoption of cloud technologies, leading to challenges in detection. False positives continue to burden security teams, while skill and resource gaps persist despite advancements in technology. The survey highlights a shift towards integrating AI and machine learning into security operations, with a notable increase in automation to enhance detection and response workflows. Respondents express cautious optimism regarding budget growth and innovation in AI-driven solutions. The report emphasizes the importance of human expertise alongside automated systems, as organizations strive to build more resilient security operations in the face of evolving threats.