Read Ilan Paretsky’s article about how organizations can identify and combat insider threats on Dark Reading :
Most, if not all, organizations are vigilant about safeguarding against threats that can penetrate endpoint systems via email, websites, and other known and unknown pathways. But what about threats that come from within your organization? Even worse, from those who you assume can be trusted? What Are Insider Threats? “Insider threats” are far from monolithic. Although we tend to think of vengeful former employees or contractors on the lookout for ill-gotten gains, the truth is that many insider breaches are wholly unintentional. CA’s Insider Threat 2018 Report states that companies should be at least as worried about the 51% of data breaches that are accidental or unintentional — caused by user carelessness, negligence, or compromised credentials — as they are about the slightly smaller percentage caused by deliberate malicious insider activity (47%).
Read his full article here.