Topics:
Most insider leaks are accidents
A new report by research firm IDC finds that more than half of those surveyed characterized insider threat incidents as predominantly accidental. Less than 20 percent believe they are deliberate.
With these kinds of numbers, it's easy to see that training should be increased dramatically, at most IT shops, to prevent the accidental leak that could prove to be detrimental.
"One of the things that jumped out at us from the study was how many insider incidents are unintentional," Chris Young, senior vice president of RSA products told DarkReading.com. "These are individual actors who often are just trying to do their jobs and don't understand that what they are doing is dangerous."
The 400 respondents in the study acknowledged more than 6,000 incidents of unintentional data loss. There were nearly 6,000 malware incidents from within the enterprise. In total, the number of internal security incidents totaled more than 57,000 last year, according to the article.
Nearly 40 percent of organizations surveyed plan to increase spending on internal security risks. Only 6 percent surveyed said they would decrease spending, says the IDC study.
Some of the problems can be easily fixed. Insiders using expired accounts should be identified and banned. Better training is always key and constant vigilance may be a better answer than throwing countless dollars at a problem.
For more on security:
- check out this DarkReading.com article
Related Articles:
The enemy within
Goldman Sachs arrest casts spotlight on programmers
Citibank under fire for not disclosing data breach




Comments