{"id":1188,"date":"2016-07-07T11:12:12","date_gmt":"2016-07-07T15:12:12","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=1188"},"modified":"2016-07-07T11:14:33","modified_gmt":"2016-07-07T15:14:33","slug":"pim-tripwire-survey","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/","title":{"rendered":"Are Federal Govt. IT Pros Overconfident About Cybersecurity?"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1190\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/federal-govt.jpg\" alt=\"federal-govt\" width=\"800\" height=\"350\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/federal-govt.jpg 800w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/federal-govt-300x131.jpg 300w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/federal-govt-768x336.jpg 768w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/federal-govt-600x263.jpg 600w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/federal-govt-180x79.jpg 180w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/federal-govt-400x175.jpg 400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p id=\"yui_3_18_1_1_1467823901533_2146\">IT professionals in the federal government may be overestimating their ability to recognize and respond to insider threats and privileged access abuse, according to a recently released report from endpoint detection and response provider Tripwire, Inc.<\/p>\n<p>The Tripwire study evaluated the confidence of IT professionals regarding the efficacy of seven key security controls required by many compliance regulations, including PCI DSS, SOX, NERC CIP, MAS TRM, NIST 800-53, CIS Top 20 and IRS 1075.<\/p>\n<p>The study was conducted for Tripwire by Dimensional Research, who interviewed 763 IT professionals across various industries, including 103 participants from federal government organizations. Obviously, that&#8217;s a pretty small sample size, but regardless, the facts that emerged are disconcerting, to say the least.<\/p>\n<p><strong>The Privileged Identity Perception Gap<\/strong><\/p>\n<p>Most cybersecurity pros can tell you that Privileged Identity Management (PIM)\u2014 the monitoring and protection of privileged user accounts\u2014 is one of the most important aspects of Identity and Access Management, and cyber security writ large. Just take a detailed look at some recent data breaches and chances are high the malicious party used a compromised privileged account to increase their permissions.<\/p>\n<div class=\"box box0\"><p><strong><a href=\"https:\/\/solutionsreview.com\/identity-management\/solutions-review-identity-management-fact-book\/\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1092 size-full alignleft\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/05\/IAM_Fact_Book_Identity_Management.png\" alt=\"IAM_Fact_Book_Identity_Management\" width=\"130\" height=\"160\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/05\/IAM_Fact_Book_Identity_Management.png 130w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/05\/IAM_Fact_Book_Identity_Management-66x81.png 66w\" sizes=\"(max-width: 130px) 100vw, 130px\" \/><\/a>Compare Top IAM Vendors with the 2016 IAM Factbook<\/strong><\/p>\n<ul>\n<li>Side-by-Side Comparison<\/li>\n<li>28 Vendors Compared<\/li>\n<li>Geographic reach, workforce, notable clients, and more.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<a href=\"https:\/\/solutionsreview.com\/identity-management\/solutions-review-identity-management-fact-book\/\" class=\"ss-button red\" target=\"_blank\">Download<\/a><\/div>\n<p id=\"yui_3_18_1_1_1467823901533_2154\">And yet nearly one-third (thirty percent) of federal government respondents to Tripwire\u2019s survey disclosed they are not able to detect every non-privileged user\u2019s attempt to access files. Despite this, seventy-three percent of federal government respondents assume their system would generate an alert or email within hours if a user inappropriately accessed file shares. Verizon\u2019s 2016 DBIR reported that seventy percent data breaches caused by insider misuse took weeks, or even years, to detect.<\/p>\n<p>Perhaps more shocking, despite this obvious shortfall, seventy-three percent of federal government respondents assume their system would generate an alert or email &#8220;within hours&#8221; if a user inappropriately accessed file shares.<\/p>\n<p>Contrary to this perception, Verizon\u2019s influential 2016 Data Breach Intelligence Investigations Report (DBIR) found \u00a0that seventy percent data breaches caused by insider misuse took weeks, or even years, to detect.<\/p>\n<p>In fact, according to the DBIR, the public sector reported more security incidents than any other industry in 2015 with privileged access misuse and non-malicious events making up nearly half (forty-six percent) of the reported incidents.<\/p>\n<div class=\"box box0\"><p><strong><a href=\"https:\/\/solutionsreview.com\/endpoint-security\/free-endpoint-protection-buyers-guide\/\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"size-thumbnail wp-image-78 alignleft\" src=\"https:\/\/solutionsreview.com\/endpoint-security\/files\/2016\/04\/Endpoint_Buyers_Guide_No_DL-150x150.png\" alt=\"Endpoint_Buyers_Guide_No_DL\" width=\"150\" height=\"150\" \/><\/a>Don&#8217;t Get Hacked.\u00a0<\/strong><\/p>\n<p><a href=\"https:\/\/solutionsreview.com\/endpoint-security\/free-endpoint-protection-buyers-guide\/\" target=\"_blank\">Compare Top Endpoint Security Providers with the 2016 Endpoint Security Buyer\u2019s Guide.<\/a><\/p>\n<ul>\n<li>24 Vendor Profiles and Capabilities References<\/li>\n<li>10 Top Questions for Buyer&#8217;s<\/li>\n<li>Complete Market Overview<\/li>\n<\/ul>\n<a href=\"https:\/\/solutionsreview.com\/endpoint-security\/free-endpoint-protection-buyers-guide\/\" class=\"ss-button default\">Download<\/a><\/div>\n<p>\u201cMore and more, information security is about protecting sensitive data,\u201d said Tim Erlin, director of IT security and risk strategy for Tripwire. \u201cFederal government agencies have a gap in identifying when data is accessed and how it\u2019s shared. We can expect more breaches to occur until these gaps are addressed.\u201d<\/p>\n<p>Seventy-eight percent of federal government respondents believe they could detect new devices on their network within hours. However, over half (fifty-two percent) of the respondents do not know exactly how long the detection process would take.<\/p>\n<p>Tripwire&#8217;s survey also discovered that fifty-eight percent of federal government respondents say their automated tools do not pick up all the necessary information, such as the locations and departments, needed to identify unauthorized configuration changes to endpoint devices.<\/p>\n<p>Fore more statistics and key takeaways from the report, check out the infographic below:<\/p>\n<p>&nbsp;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1189\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Tripwire-Breach-Survey-US-Federal-Infographic.jpg\" alt=\"Tripwire-Breach-Survey-US-Federal-Infographic\" width=\"792\" height=\"2013\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Tripwire-Breach-Survey-US-Federal-Infographic.jpg 792w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Tripwire-Breach-Survey-US-Federal-Infographic-118x300.jpg 118w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Tripwire-Breach-Survey-US-Federal-Infographic-768x1952.jpg 768w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Tripwire-Breach-Survey-US-Federal-Infographic-403x1024.jpg 403w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Tripwire-Breach-Survey-US-Federal-Infographic-106x270.jpg 106w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Tripwire-Breach-Survey-US-Federal-Infographic-32x81.jpg 32w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Tripwire-Breach-Survey-US-Federal-Infographic-71x180.jpg 71w\" sizes=\"(max-width: 792px) 100vw, 792px\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>IT professionals in the federal government may be overestimating their ability to recognize and respond to insider threats and privileged access abuse, according to a recently released report from endpoint detection and response provider Tripwire, Inc. The Tripwire study evaluated the confidence of IT professionals regarding the efficacy of seven key security controls required by [&hellip;]<\/p>\n","protected":false},"author":24,"featured_media":1190,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,6],"tags":[351,349,189,179,151,350],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Are Federal Govt. IT Pros Overconfident About Cybersecurity?<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jeff Edwards\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/\",\"name\":\"Are Federal Govt. IT Pros Overconfident About Cybersecurity?\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/federal-govt.jpg\",\"datePublished\":\"2016-07-07T15:12:12+00:00\",\"dateModified\":\"2016-07-07T15:14:33+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6\"},\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/federal-govt.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/federal-govt.jpg\",\"width\":800,\"height\":350},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Are Federal Govt. IT Pros Overconfident About Cybersecurity?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6\",\"name\":\"Jeff Edwards\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g\",\"caption\":\"Jeff Edwards\"},\"description\":\"Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.\",\"sameAs\":[\"https:\/\/solutionsreview.com\",\"https:\/\/x.com\/InfoSec_Review\"],\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/jedwards\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Are Federal Govt. IT Pros Overconfident About Cybersecurity?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/","twitter_misc":{"Written by":"Jeff Edwards","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/","url":"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/","name":"Are Federal Govt. IT Pros Overconfident About Cybersecurity?","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/federal-govt.jpg","datePublished":"2016-07-07T15:12:12+00:00","dateModified":"2016-07-07T15:14:33+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6"},"breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/federal-govt.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/federal-govt.jpg","width":800,"height":350},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/pim-tripwire-survey\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Are Federal Govt. IT Pros Overconfident About Cybersecurity?"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6","name":"Jeff Edwards","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g","caption":"Jeff Edwards"},"description":"Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.","sameAs":["https:\/\/solutionsreview.com","https:\/\/x.com\/InfoSec_Review"],"url":"https:\/\/solutionsreview.com\/identity-management\/author\/jedwards\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/1188"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/24"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=1188"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/1188\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/1190"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=1188"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=1188"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=1188"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}