Network Security News

CISOs see insiders as greatest 'human threat' to data security

Wednesday, June 24, 2009

The vast majority of chief information security officers surveyed at a CISO summit this month said that insiders are the greatest human threat to data security, while only 18 said they are concerned about threats from external sources such as cybercriminals and corporate spies.

The survey by NetWitness Corporation and MIS Training Institute revealed that 80 percent of CISOs and CSOs feel insiders are the greatest human threat.

Sara Hook, conference director at MIS Training Institute, said the survey findings are "alarming," in that there is a "misperception that traditional security approaches alone can protect against information leaks and that some CISOs were not sure what they need for data protection or were not planning to focus any money in that area this year."

Although CISOs are at least thinking about insider threats, another recent survey of business managers found that executives seemingly don't think about insider threats to data security from ex-employees.

A Courion Corporation survey revealed that 93 percent of business managers are confident that terminated employees pose no risk to their network security, even though many have limited knowledge of the systems to which their employees have access.

Courion said companies show "unwarranted confidence" that their systems are secure from former employees gaining access through "zombie accounts."