{
  "docId": "019dd923-5e88-73ef-bd57-cf13ce8ed1d4",
  "docSlug": "72b88f635783ce33",
  "documentTitle": "incident response insights january 2025",
  "authorId": "BoozAllenHamilton",
  "authorName": "Booz Allen",
  "documentKindSlug": "consulting-deck",
  "documentKindLabel": "Consulting deck",
  "sourceTypeSlug": "strategy_consulting",
  "sourceTypeLabel": "Strategy consulting",
  "presentationDate": null,
  "orientation": "landscape",
  "aspectRatio": 1.778,
  "pageNumber": 2,
  "pageCount": 10,
  "prevPage": 1,
  "nextPage": 3,
  "slideType": "kpi_dashboard",
  "function": "summarize",
  "density": "dense",
  "nDataPoints": 32,
  "notes": "The slide uses donut charts and 100% stacked bar charts to visualize composition and trends.",
  "elementsJson": [
    "donut_chart",
    "bar_chart_100pct",
    "paragraph",
    "kpi_table"
  ],
  "metadataConfidence": 1,
  "imagePath": null,
  "slideHref": "/slides/019dd923-5e88-73ef-bd57-cf13ce8ed1d4/2",
  "deckHref": "/decks/019dd923-5e88-73ef-bd57-cf13ce8ed1d4",
  "deckJsonHref": "/decks/019dd923-5e88-73ef-bd57-cf13ce8ed1d4.json",
  "deckAnchorHref": "/decks/019dd923-5e88-73ef-bd57-cf13ce8ed1d4#slide-2",
  "components": [
    {
      "bbox": null,
      "kind": "callout",
      "text": "In December, we saw a marked increase in Insider Threats, DDoS and Sensitive Data Loss incidents, but a decrease in Ransomware, Email Compromise, Network Intrusion and Unauthorized Access compared to the previous month.",
      "attrs": null,
      "subkind": null,
      "toolName": "Visual emphasis",
      "toolSlug": "visual-emphasis",
      "confidence": null,
      "componentId": "019dd952-1042-7629-9bdf-5cdd337a942f",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.35,
        "w": 0.25,
        "x": 0.35,
        "y": 0.55
      },
      "kind": "chart",
      "text": "Incidents Types Monthly Trends",
      "attrs": null,
      "subkind": "bar-stacked-100pct",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "9779dc03-26e0-40fd-a8d5-1bf02155ce39",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.35,
        "w": 0.25,
        "x": 0.65,
        "y": 0.55
      },
      "kind": "chart",
      "text": "Incidents Industry Monthly Trends",
      "attrs": null,
      "subkind": "bar-stacked-100pct",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "b98bfb90-21f5-40ba-8f1c-0ff73026ea61",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.4,
        "w": 0.25,
        "x": 0.35,
        "y": 0.05
      },
      "kind": "chart",
      "text": "Incidents by Types - December 2024",
      "attrs": null,
      "subkind": "donut",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "89d0a5fb-8219-44f0-82be-1473b1495213",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.4,
        "w": 0.25,
        "x": 0.65,
        "y": 0.05
      },
      "kind": "chart",
      "text": "Incidents by Industry - December 2024",
      "attrs": null,
      "subkind": "donut",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "e71b8bcf-5b95-422c-8656-3839f81dc354",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": null,
      "kind": "metric",
      "text": "Incident volume: 43%",
      "attrs": null,
      "subkind": "primary",
      "toolName": "Quantification",
      "toolSlug": "quantification",
      "confidence": null,
      "componentId": "019dd952-1042-7629-9bdf-60bab06c3bb0",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.25,
        "w": 0.15,
        "x": 0.15,
        "y": 0.28
      },
      "kind": "paragraph",
      "text": "In December, we saw a marked increase in Insider Threats, DDoS and Sensitive Data Loss incidents, but a decrease in Ransomware, Email Compromise, Network Intrusion and Unauthorized Access compared to the previous month.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "b003c51a-ba3c-4a8b-bfe2-3aafff1b960b",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.05,
        "w": 0.15,
        "x": 0.15,
        "y": 0.18
      },
      "kind": "title",
      "text": "Monthly Incident Metrics",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "8c80239b-c0fb-43fa-814e-1e5ac13318db",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [],
  "frameworks": [],
  "arcBeats": [
    {
      "to": 2,
      "from": 1,
      "beatId": "997c097e-28be-4a56-9ffb-e83c8f65cd81",
      "arcName": "The Sparkline",
      "arcSlug": "sparkline",
      "beatName": "Current Situation",
      "beatSlug": "sparkline-what-is-1",
      "evidence": "The deck begins with a cover slide and KPI dashboards",
      "position": 0,
      "confidence": 0.8,
      "parentBeatName": "Setup",
      "parentBeatSlug": "setup"
    }
  ],
  "loops": [
    {
      "to": 3,
      "from": 2,
      "name": "Voice Of Customer",
      "slug": "51-voice-of-customer",
      "bestFor": "Product strategy, customer experience, market research",
      "matchId": "13990092-445c-4248-90f8-d23c56a6a58f",
      "evidence": "Slides 2-3 provide KPI dashboards and YTD trends",
      "position": 0,
      "objective": "Understand current incident response metrics",
      "structure": "What Customers Say (Verbatim) -> The Pattern Across Voices -> The Insight -> The Response",
      "confidence": 0.6,
      "description": "Let customer quotes and feedback drive the narrative and validate the insight"
    }
  ],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}