Enterprises continue to have difficulties detecting, blocking and responding to threats. Responses to multiple SANS surveys show that IT organizations don’t have the level of visibility they need to both detect and respond to threats in a timely manner. For example, lack of visibility and difficulties correlating events across systems were among the top inhibitors to effective incident response, according to a SANS survey on Incident Response published in August 2014.