Insider Threat

The Insider Threat comes in all shapes and sizes, making it a hard nut to crack for IT. Virtually anyone with approved access to your corporate network or data stores is an Insider. Traditional methods to protect data, such as encryption, become meaningless. An insider is already authorized to bypass these measures and access sensitive data. How do you protect your organization against the Insider Threat? The first step...

We recently released the results of our new report, IT Confidential: The State of Security Confidence, in which we uncovered some surprising truths about the insider threat. In particular, our report revealed that those tasked with protecting data, the “gatekeepers,” were often responsible for putting it at risk. This result was universal across all industries, including highly regulated industries such as healthcare.

More than half of data breaches in the UK public sector originate from insiders, according to a new survey. 8MAN's Public Sector Data and Information Security Survey, which surveyed 600 IT professionals in the UK public sector (local authorities, healthcare, education), found that human error, rather than malicious intent, was to blame for many of the insider data breaches. When it came to large organizations alone, those insiders accounted...

It’s now recognized that people are the root cause of most data breaches, as many as 90% of all breaches, either inadvertently or maliciously putting data at risk. The expansion of the attack surface through mobility, the cloud and even the Internet of Things has just increased the number of ways that “people” can put data at risk. These breaches are, in many ways, preventable, but the first step...

The idea that ‘people’ are the root cause of data breaches is starting to hit home with executives. According to the Verizon DBIR, 90% of all security incidents back to ‘people,' whether mistakes, phishing, bad behaviour, or lost stuff. ‘People’ can leave organizations exposed to cyberattacks, by using bad passwords hygiene, losing a device, succumbing to a phishing scam; the end result that gets publicized is a cyberattack, but...