Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Google Updates to GMail in the Works | Main | Data Breach with a Twist of Cover-Up »

Potential for Insider Attacks are Growing Concern

A survey of senior IT executives by Deloitte Touche Tohmatsu reveals what is likely to keep them up at night: their employees:

The survey also revealed a shift in priorities from protecting sensitive data from attack by outsiders to addressing internal threats. An overwhelming majority of respondents, 91% are concerned about employees. Nearly 80% cited the human factor as the root cause for information security failures.

The top priority for these executives is access control:

The Deloitt survey identified identity and access management as the top operational initiative of the year, followed by regulatory compliance, security training and awareness, governance for security and disaster recovery and business continuity.

Not surprisingly, wide public attention on data breaches is helping security budgets. The breaches from the inside, like the Fidelity National database administrator who stole data and exposed 2.3 million credit and bank records (related post), really can get people's attention. Funding security is as important as funding physical plant and production supplies - you're not going to be in business long without it.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/444

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net