According to the latest survey of 500 IT professionals, one in three respondents said that their business has experienced an insider strike in the last year. Other observation includes:
- Seventy four percent said that their business is exposed to insider threats
- Fifty six percent said insider flows are becoming more regular
- Seventy one percent said they are most worried about inadvertent flows resulting from the use of unsecured mobile devices, accidental outside sharing, and unsanctioned programs
- Sixty eight percent are worried because of threat caused by neglect
- Sixty one percent are worried because of threat caused by malicious insiders
Privileged users have emerged as the biggest security threat which represents 60 percent of businesses. Respondents said rise in the number of apparatus with access to sensitive information, inadequate data protection options, worker training, and more information leaving the network perimeter are causing more insider threat. Cloud storage programs and cooperation software are seen as the most exposed.
“Adoption of cloud and BYOD are positive developments, but organizations that have limited cross-app visibility will struggle to detect anomalous behavior and need to rethink their approach to data security,” Bitglass CEO Nat Kausik said in a statement. “The reality is that cloud apps have made data more readily accessible and insider threats more prominent — it’s up to the enterprise to put adequate data controls and policies in place to secure vital data.”
Twenty three percent said it can take them a month or more to identify an insider violation
Sixty six percent said stopping insider risks is more challenging than shielding against outside dangers
A different RedOwl study of 281 participants at Black Hat 2016 found that 47 percent of participants had experienced an insider event of some sort in the previous year.
When asked who in their business is intrigued in mitigating insider risks, answers contained- typical workers, executives, board of directors, human resources, and IT and security teams. Impact of insider events are standing legal repercussions, IP loss, financial loss, negative cultural impact, and brand damage.
____________________________________________________________________________________________
Alertsec has created a web based encryption service that radically simplifies deployment and management of PC encryption by using industry leading Check Point Full Disk Encryption software.