Story image

Nearly half of AU organisations not equipped for malicious insiders

19 Aug 2016

Mimecast Limited recently released new data that reveals the majority of organisations believe they are their own worst enemy.

Want that in numbers? 40 percent reported that they are ill-equipped to cope with the threat of malicious insiders and more than twice that amount, (with a whopping 91 percent), call malicious insiders a major threat to their organisation’s security.

Entitled 'Business Email Threat Report: Email Security Uncovered', the study from Mimecast made it clear that malicious insiders represent not only a major source of risk and anxiety over security preparedness, but a growing one.

According to Mimecast CEO, Peter Bauer, a common problem amongst businesses is to focus predominantly on perimeter defence and outside threats, while struggling with the risk that comes from their own people.

“Organisations of all sizes struggle with the risks that are posed by employees being targeted by adversaries to launch and execute attacks to gain access to data or funds” says Bauer. “Every day, we trust employees with sensitive information and powerful tools, but we don’t give them the effective security education and advanced cloud security solutions that goes hand-in-hand with those responsibilities.”

Bauer asserts that as a community, we must work together to enact better business processes.

“Another issue we can work together to control is rogue employees who use unapproved file-sharing or cloud storage services outside of their organisation’s security policies thus exposing their organisation to increased risk,” Bauer says. “IT managers have, for too long, not paid due attention to this threat. We must re-evaluate unrestricted access to these services and ensure that protections are put in place quickly to balance security and the needs of the business.”

Some of the additional findings from Mimecast’s research include:

  • Over half (56 percent) of IT security decision makers view malicious insiders as a moderate or high threat to their organisation.
  • 12 percent of security decision makers view malicious insiders as their number one threat.
  • Globally, those who say they’re very equipped on cybersecurity feel virtually just as vulnerable to insider threats as those who believe they aren’t equipped at all (16 percent vs. 17 percent), indicating that the risk of malicious insiders trumps perceptions of security confidence.

There are a number of ways to protect against malicious insiders. Mimecast recommends assigning role-based permissions to administrators, implementing internal safeguards and data exfiltration controls, offering creative employee security training, nurturing a culture of communication within teams and training your organisation’s leadership.

ESET researchers break down latest arsenal of the infamous Sednit group
At the end of August 2018, the Sednit group launched a spear-phishing email campaign, in which it distributed shortened URLs that delivered first-stage Zebrocy components.
Container survey shows adoption accelerating while security concerns remain top of mind
The report features insights from over 500 IT professionals.
Google 'will do better' after G Suite passwords exposed since 2005
Fourteen years is a long time for sensitive information like usernames and passwords to be sitting ducks, unencrypted and at risk of theft and corruption.
Who's watching you? 
With privacy an increasing concern amongst the public, users should be more aware than ever of what personal data companies hold.
Fake apps on Google Play scamming users out of cryptocurrency
Fake cryptocurrency apps on Google Play have been discovered to be phishing and scamming users out of cryptocurrency, according to a new report from ESET.
Managing data to comply with privacy regulations - Micro Focus
It’s crucial for organisations to be able to access, understand, and accurately classify the data they have so they know how to treat it.
Hackbusters! Reviewing 90 days of cybersecurity incident response cases
While there are occasionally very advanced new threats, these are massively outnumbered by common-or-garden email fraud, ransomware attacks and well-worn old exploits.
SEGA turns to Palo Alto Networks for cybersecurity protection
When one of the world’s largest video game pioneers wanted to strengthen its IT defences against cyber threats, it started with firewalls and real-time threat intelligence from Palo Alto Networks.