| Home | Data Leakage | Policy Bridge | About Us | Contact Us | Surveillance | Webinars | Other Services |
Data Security / Data Encryption
The threat from “trusted users” is now understood to be significantly greater than the risks posed by outside hackers to a business. Gartner Research estimates that more than 70% of unauthorized access to information systems is committed by employees, as are more than 95% of intrusions that result in significant financial losses.
While much has
been said by the security industry about the “internal user threat” the
simple truth is that the overwhelming majority of users are well
intentioned. They do not intend
to exploit or misappropriate sensitive business information.
While it is true that there are well publicized incidents of
disgruntled former employees stealing sensitive business information or
intellectual property, our hypothesis is that this risk is small when
compared to the risks posed by the well intentioned, albeit somewhat
ignorant, trusted user.
Business users share sensitive information using multiple methods: Email and attachments- Shared File Servers- PC Removable Media (e.g. CD-R/RW, DVD-R/RW, Zip®, USB Keychain Drives) Paper
68% of a company’s critical data is stored on users’ PC hard drives
and removable devices CIO Annual Magazine Survey of 500 Large and
Medium Companies, 2008
More than half of 484 tech professionals surveyed said removable
drives contain confidential information that is unprotected. Gartner
Update, 8/25/2007
At least one removable drive with data is lost at work each month,
according to 20% of those polled. Gartner Update, 8/25/2007
Government and Industry Regulations / Sarbanes-Oxley Section 404
California SB 1386 / NIST standards for US Government Agencies
US Office of Management & Budget Security Guidelines / PCI
Compliance
With every New Year comes new threats to network security, and, unfortunately, 2009 is no different.
Due to a bleak economic outlook and loss of job stability, we can expect to see increased threats this year from so-called “malicious insiders”: company employees with unscrupulous intentions. According to a recent article in Network World, 88 percent of system administrators said they'd take confidential data with them if they knew a layoff was coming.
1. Please join my meeting.
https://www2.gotomeeting.com/join/615692025
2. Use your microphone and
speakers (VoIP) - a headset is recommended.
Or, call in using your telephone.
Dial 916-233-3080
Meeting ID: 615-692-025