BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Why To Consider Partners As Potential Insider Threats Too

Posted November 1, 2011    Peter McCalister

In early September BeyondTrust CMO Brian Anderson covered the news around Stanford Hospital & Clinics medical privacy breach that resulted in 20,000 patients’ personal data being publicly available on a website for nearly a year. At the time the breach was first reported by The New York Times, it was unclear how the data made it onto the website.

guy laptop

Recently, after a $20 million lawsuit related to the breach hit Stanford Hospital & Clinics, the hospital released a statement holding a third party billing contractor responsible for the data breach. According to an October 5th New York Times article, the data breach happened “because a billing contractor’s marketing agent sent the electronic spreadsheet to a job prospect as part of a skills test, the hospital and contractors confirmed this week. The applicant then sought help by unwittingly posting the confidential data on a tutoring Web site.”

Thirty-nine percent of all data breaches involve third-party outsourcers – this according to data pulled from a recent Ponemon Institute study. The lesson we can all learn from the Stanford incident is that organizations, be it a healthcare provider or a national retailer, not only have to monitor their own security, but also that of their associates and vendors. While it is important to provide the information and access necessary for third-party resources to do their jobs, at the same time it’s irresponsible to allow vendors free reign over sensitive data or network assets. An all or nothing approach to granting users access doesn’t work here. Effective privilege identity management coupled with comprehensive knowledge of your partners’ and vendors’ security policies and practices is the best way to safeguard your company’s most valued assets.

Leave a Reply

Additional articles

pbps-customer-campaign-image

You Change Your Oil Regularly; Why Not Your Passwords?

Posted September 11, 2014    Chris Burd

There are many things in life that get changed regularly:  your car oil, toothbrush and hopefully, your bed sheets.  It’s rare that you give these things much thought – even when you forget to change them. But what if you’re forgetting something that can cost you millions of dollars if left unchanged for long periods…

Tags:
, , ,

On-Demand Webcast: The Little JPEG that Could (Hack Your Organization) with Marcus Murray

Posted September 10, 2014    Chris Burd

IT security has come a long way, but every once in a while you see something that makes you think otherwise. Every day, internal and external hackers breach and traverse “secure” environments, making you wonder just how easy it is for attackers to completely compromise your network. In a new on-demand BeyondTrust webcast, Marcus Murray,…

Tags:
, , , , ,

Retina Vulnerability Audits – September 2014 Patch Tuesday

Posted September 9, 2014    BeyondTrust Research Team

The following is a list of Retina vulnerability audits for this September 2014 Patch Tuesday: MS14-052 – Cumulative Security Update for Internet Explorer (2977629) 35141 – Microsoft Cumulative Security Update for Internet Explorer (2977629) 35142 – Microsoft Cumulative Security Update for Internet Explorer (2977629) – IE8/2003 35143 – Microsoft Cumulative Security Update for Internet Explorer (2977629) – IE8…