In a pure mathematical attack, (i.e., lacking any other information to help break a cipher) two factors above all count: 1  Computational power available, i.e., the computing power which can be brought to bear on the problem. 2  Key size, i.e., the size of key used to encrypt a message.
OMB's guidance to agencies requires them to report each PII-related breach to DHS's U.S. Computer Emergency Readiness Team (US-CERT) within 1 hour of discovery. However, complete information from most incidents can take days or months to compile; therefore preparing a meaningful report within 1 hour can be infeasible.
Only 14 percent could detect the source of the breach within minutes, while 33 percent said it took a day and for 16 percent, a week. The findings in this particular report align with its recent Data Breach Investigations report, which found 63 percent of security incidents took weeks or months to be discovered. The data was taken from these organizations within seconds or minutes in 46 percent of the cases. Average organizations are storing approximately 11-15 terabytes of security data week, a figure that Gartner expects to double annually through 2015.