Why Insider Security Threats Are a Growing Problem
-
Why Insider Security Threats Are a Growing Problem
By Gina Roos -
Rising Insider Threats
62% of IT security professionals said insider threats have increased in the past 12 months. -
Big Concerns
The top sources of insider threats include insufficient data protection (53%), more data leaving the network (50%) and more devices with sensitive data (50%). -
Threat Disconnect
The average data breach lasts nearly seven months, yet only 11% of organizations believe it would take even six months to detect an insider threat. -
No Visibility
45% of respondents had no idea how many insider threats actually occurred in their organizations during the last year. -
Prevention Measures
30% of organizations said they do not have the appropriate controls to prevent an insider attack, and 23% are unsure if they have the appropriate controls. -
App Vulnerabilities
Applications most vulnerable to insider threats include collaboration and communication (45%), cloud storage and file sharing (43%), and finance and accounting (38%). -
Riskiest Users
Privileged users pose the biggest insider threat (59%), followed by contractors and consultants (48%), and regular employees (46%). -
Detection Challenges
Key reasons detection and prevention of insider attacks are increasing: insiders have credentialed access to the network and services (66%), increased use of apps that can leak data (58%) and increased amount of data that leaves protected boundary/perimeter (42%). -
Biggest Barriers
The biggest perceived barriers to better insider threat management include a lack of training and expertise (63%), insufficient budgets (48%) and a lack of priority for insider threat defense (43%). -
Threat Tools
The most popular strategies for combatting insider threats include user training (45%), background checks (41%) and user activity monitoring (39%). -
Effective Protection
The most effective tools in protecting against insider threats include policies and training (36%), data-loss prevention (DLP) tools (31%), and identity and access management (IAM) (30%). -
Deterrence Tactics
Most organizations focus their insider threat management resources on deterrence tactics (63%), followed by detection (51%), and analysis and forensics (41%).
What Partners Need to Know About HP, Inc. 
MSPs Face Big Cybersecurity Talent Gap 
Why Tech Companies Are Eager to Invest in 5G 
The Problem With Partner Referral Programs 
Microsoft Taps Channel for Digital Business 
New Technologies Will Fuel Channel Opportunities 
Channel's Transition to the Cloud Requires More Time 
Microsoft's Cloud Channel Begins to Mature 
Defining MSPs' Goals, Challenges and Tools 
Why Metrics Matter to the Channel Businesses face a rising security threat from within their companies due to increased adoption of the cloud and mobile devices, according to new research, conducted by Crowd Research Partners, and sponsored by Bitglass, a cloud access security broker. The study, based on a survey of 500 IT and security professionals, reveals that more than six in 10 respondents have seen an increase in insider threats over the past 12 months. They attribute the growth of insider threats to insufficient data protection, more data leaving the network and more devices with sensitive data. What's troubling is that many organizations lack information about how many insider threats actually occurred within the organization. Yet insider attacks can damage a company's reputation, and remediation costs can reach into the millions. The challenge for companies is detecting insider threats, particularly as more apps and data migrate to the cloud. Here are key takeaways from the report that show why IT and security teams need to implement tools and services that give them greater visibility and control of their data.