BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Why To Consider Partners As Potential Insider Threats Too

Posted November 1, 2011    Peter McCalister

In early September BeyondTrust CMO Brian Anderson covered the news around Stanford Hospital & Clinics medical privacy breach that resulted in 20,000 patients’ personal data being publicly available on a website for nearly a year. At the time the breach was first reported by The New York Times, it was unclear how the data made it onto the website.

guy laptop

Recently, after a $20 million lawsuit related to the breach hit Stanford Hospital & Clinics, the hospital released a statement holding a third party billing contractor responsible for the data breach. According to an October 5th New York Times article, the data breach happened “because a billing contractor’s marketing agent sent the electronic spreadsheet to a job prospect as part of a skills test, the hospital and contractors confirmed this week. The applicant then sought help by unwittingly posting the confidential data on a tutoring Web site.”

Thirty-nine percent of all data breaches involve third-party outsourcers – this according to data pulled from a recent Ponemon Institute study. The lesson we can all learn from the Stanford incident is that organizations, be it a healthcare provider or a national retailer, not only have to monitor their own security, but also that of their associates and vendors. While it is important to provide the information and access necessary for third-party resources to do their jobs, at the same time it’s irresponsible to allow vendors free reign over sensitive data or network assets. An all or nothing approach to granting users access doesn’t work here. Effective privilege identity management coupled with comprehensive knowledge of your partners’ and vendors’ security policies and practices is the best way to safeguard your company’s most valued assets.

Leave a Reply

Additional articles

webinar1

On Demand Webinar: Advanced Windows Tracing

Posted April 17, 2015    BeyondTrust Software

Webinar: Security MVP, Paula Januszkiewicz, shows Windows administrators how to be more aware of what happens whenever somebody does something within the system.

Tags:
, ,
5

The Delicate Art of Remote Checks – A Glance Into MS15-034

Posted April 15, 2015    Bill Finlayson

Remote vulnerability detection – using ms15-034 as an example.

Tags:
, ,
databreach

2015 Verizon Data Breach Investigations Report: More End Users as Threats

Posted April 15, 2015    Scott Lang

The 2015 Verizon report says end users are the number one source of insider abuse incidents. Find out how to mitigate the risks.

Tags:
,