Seven Insider Threat Mitigation Projects

Channel providers offer a distinct advantage when it comes to risk assessments and the mitigation recommendations that bubble up as a result. Not only do they have more experience than the customer in identifying and quantifying risk, but their third-party neutrality can offer a breath of fresh air compared to the typical vendor.

This is a no-brainer up-sell for VARs delivering data security-focused products. It’s impossible to protect sensitive information from insiders if the client doesn’t even know how valuable it is or where it resides. Discovery and classification of information must be performed before the client can ever control the movement of these assets or the devices they sit on.

These days it seems that every security vendor has its own flavor of DLP. The dizzying array of options and technological approaches quickly overwhelms even the most grizzled in-house IT vet. Channel partners can take the mantle of pain from customer shoulders by doing the appropriate vendor selection homework and suggesting the right DLP fit.

Enterprises can greatly curtail their exposure to insider threats—be they malicious or careless—by clamping down on data so that users can only access information on a need-to-know basis. Solution providers should be poised to not only sell the access management technology, but also the services around defining roles and access levels.

Solution providers can help customers clamp down on account abuse, ghost accounts and password sharing with the right combination of authentication and provisioning products that ensure the mailroom clerks and summer temps aren’t fiddling with the financial back-end.

Can your customers truly tap into all of their security software, appliances and services to pinpoint dangerous user trends? SIEM tools help bring all of these pieces together—and the enterprising channel partner can sell the monitoring and interpretation of SIEM results to create a sustained revenue stream.

Some of the most common unintentional insider security events occur when employees lose USB thumb drives and other portable devices they’ve loaded with sensitive information or when they carelessly load up malware-laden software from the Internet only to create a network backdoor. Solution providers can not only help with the installation of these controls, but also the development of policies and rule sets that run them.

View All Slideshows >