This whitepaper examines the results of the 2020 SANS Enterprise Cloud Incident Response (IR) Survey. The survey was promoted to the information security community during the first half of 2020 and garnered 218 respondents. A solid 40% of respondents stated that they do not assess the effectiveness and maturity of cloud IR processes, indicating that the cloud shift hasn’t fully grown and integrated into their businesses just yet. In cloud environments, most seek to solve before they understand, ensuring that the gap and visibility of effectiveness and maturity will likely increase in the future. The cloud is a great enabler, but without proper understanding of the different components deployed, challenges within IR will continue to develop.