Dale Hunscher at FutureHIT puts together a few thoughts on IT security in an increasingly tech-oriented society.
The teenage hacker and the identity thief from some country in the
former Soviet bloc get a lot of traction in the press as villains.
However, what I have come to understand gradually is expressed in
the title of this article from last November on SearchSecurity.com: Insider security threats come in many forms. The most likely candidates for identity theft in your organization are the people working alongside you.
Exactly. The laptop with sensitive data on it (which it shouldn't have) left in the car (where it shouldn't be) by an employee (who should know better) is a serious threat that has to do with the way security is approached culturally in the workplace. There need to be security best-practices in place and they need to be enforced:
Companies must also be prepared to deal with people who create
security risks without necessarily meaning to. If the network suffers a
security breach because an employee was visiting seedy Web sites on
company machinery, for example, there must be a plan for punishment.
"People need to understand that their computers are for business
only and that they can be disciplined or even fired for using them for
anything that isn't business related," Anderson said.
Or, you know, letting them get stolen with sensitive patient/client information in tow. There are some other valuable insights, as well. Click through and take a look.
Link