HomeTopicsDiscovery

Discovery

Cybersecurity statistics about discovery

Showing 1-15 of 15 results

51% of firms identified data discovery as a top priority for improving audit readiness and control visibility.

For data breach cases where the attacker was detected by internal IT staff or an outsourced cybersecurity provider (OCP), it took an average of 61 days to notice the attacker prior 2019.

For data breach cases where the attackers themselves disclosed the breach, it took an average of 17 days to notice the attacker since 2019.

Across all data breach cases combined, the average time to notice an attacker was 90 days prior 2019.

Across all data breach cases combined, the average time to notice an attacker was 45 days since 2019.

For data breach cases where the attacker was detected by internal IT staff or an outsourced cybersecurity provider (OCP), it took an average of 35 days to notice the attacker since 2019.

For data breach cases where the attacker was detected by a third-party, it took an average of 91 days to notice the attacker since 2019.

For data breach cases where the attackers themselves disclosed the breach, it took an average of 38 days to notice the attacker prior to 2019.

For data breach cases where the attacker was detected by a third-party, it took an average of 136 days to notice the attacker prior 2019.

Discovery techniques like System Network Configuration Discovery and Process Discovery scored below 12% in prevention effectiveness.

Picus8/11/2025

Only 46% of healthcare leaders have adopted data discovery technology.

Almost 70% of CISOs/CSOs/CTOs have taken on new data discovery responsibilities, specifically for AI initiatives.

52% of Security Engineers/Architects have new AI data discovery responsibilities.

59% of security professionals now have new AI data discovery responsibilities.

34% of enterprises admit their security controls are lagging behind AI's rapid deployment.