BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

People are Less Forgiving of Insider Threats than Outside Hacks

Posted April 6, 2012    Peter McCalister

A new study says that people are more likely to file a lawsuit against a company that experienced a data breach if that breach was the result of unauthorized disclosure or disposal of data than if the breach happened due to an outside hack. The study, titled Empirical Analysis of Data Breach Litigation, says “plaintiffs respond more to the careless or negligent handling by a firm of their personal information than to a firm’s inability to withstand a cyber-attack.”

As this research indicates, people are less tolerant or forgiving of missteps or carelessness with the handling of sensitive information internally, which should be a red flag to any company that has yet to institute identity and access management policies. Human nature is capricious and mistakes are inevitable – it’s unfortunate, but because these are indisputable characteristics of people companies are liable for taking the proper precautions to protect sensitive data.

The study also showed the chance of a lawsuit was 9.7 percent higher if the breach exposed financial information, while breaches involving social security numbers were negatively correlated with lawsuits, though the effect was relatively small at 2.4 percent. Any medical data or credit card data had no effect on the probability of litigation.

Regardless of what type of information your company has, be it sensitive customer data, or your own intellectual property, having the right insider threat protection policies can be the difference between forgiveness and a lawsuit.

Leave a Reply

Additional articles

webinar 2

On Demand Webinar: Because Auditing Stinks Sometimes

Posted July 2, 2015    Lindsay Marsh

Auditing stinks. Well, mostly stinks. In this on demand webinar, lead by Group Policy MVP Jeremy Moskowitz, you’ll learn the three key tenets to real Group Policy auditing. Tenet 1: Why do you care about Group Policy auditing? Tenet 2: How does Eventing help you know “Who did what?” Tenet 3: How does Reporting tell…

Tags:
, , , ,
skeletonkey3_713678_713680

Stopping the Skeleton Key Trojan

Posted June 29, 2015    Robert Auch

Earlier this year Dell’s SecureWorks published an analysis of a malware they named “Skeleton Key”. This malware bypasses authentication for Active Directory users who have single-factor (password only) authentication. The “Skeleton Key” attack as documented by the SecureWorks CTU relies on several critical parts.

Tags:
, , , , ,
webinar 2

On Demand Webinar: 10 Steps to Building an Effective Vulnerability Management Program

Posted June 26, 2015    BeyondTrust Software

In this on demand webinar, Cybersecurity Expert, Derek A.Smith will take you through his 10 steps for a successful vulnerability management program and how to get started now.

Tags:
, ,