A new IDC Business Value White Paper commissioned by Mandiant (part of Google Cloud) reports that organizations engaging with Mandiant Consulting realized an average annual benefit of $4.3 million, a 268% three-year ROI, and a payback period of 4.1 months. The study was based on IDC‘s standard ROI methodology and qualitative and quantitative interviews with current Mandiant customers, all large, highly complex environments (average $17.3 billion revenue, 74,000 employees).

Mandiant addresses common CISO pain points—resource constraints and skill deficits—by distilling findings from over 500,000 hours of global incident investigations into frontline threat intelligence. Customers can then focus on relevant threats rather than trying to monitor everything. A healthcare organization reported that the partnership changed commercial conversations, with security becoming a top-three client selection reason and reducing insurance costs by $50,000 per year. A retail organization highlighted how Mandiant helped create detection use cases specific to the Scattered Spider cybercrime group, enabling them to monitor, detect, and neutralize related attacks. An energy-sector organization noted that Mandiant‘s deep technical audits across identity infrastructure (Active Directory, privileged account management, MFA) provided independent validation that reassured leadership.

IDC also quantified broader operational improvements: 59% of customers reported greater preparedness to address cyberattacks, 45% saw overall improvement in cyber-resilience, and 36% reported more efficient security analyst teams, freeing staff for strategic initiatives. The study is sponsored by Google and published in July 2026.