![\"Insider](\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/07\/IAM-CEO-mod.jpg\")
<\/p>\n<\/p>\n
September marks the beginning of Insider Threat Awareness Month 2020. Enterprises can\u2019t ignore that some of the most pressing threats to their digital IT infrastructure might not come from without but from within. Whether it stems from actual malice or from simple ignorance, employees and third-parties could cause data breaches, data leaks, or business disruptions just as easily as any hacker.\u00a0<\/span><\/p>\n In fact, <\/span>behavior-based security analytics provider<\/span> Gurucul<\/span><\/a> over 70 percent of all enterprises possess a vulnerability to insider threats. 40 percent of enterprise respondents said they can\u2019t detect either an insider threat during or after it moves data outside the network. Another report from <\/span>SolarWinds<\/span><\/a> found nearly 62 percent of enterprise IT and non-IT-respondents cite user errors as their top cybersecurity insider threat.<\/span><\/p>\n To recognize Insider Threat Awareness Month 2020, we consulted with security experts<\/a> from around the world. Here\u2019s what they had to say.\u00a0<\/span><\/p>\n Orion Cassetto is Director of Product Marketing at<\/span><\/i> Exabeam<\/span><\/i><\/a>.<\/span><\/i><\/p>\n \u201cEspecially now, as entire workforces remain in remote working conditions, the danger of insider threats is as unmistakable as ever. It is critical for businesses to recognize that this form of threat from legitimate users has always been more elusive and harder to detect or prevent than traditional external threats. Additionally, while the most common insider threats are not usually motivated by malicious intent, and the damage they cause is unintentional, it is no less ominous to business viability.\u00a0\u00a0<\/span><\/p>\n Given those known factors, irregular behavior detected at the system or network level can be an indicator of an insider threat. There are numerous indicators for insider threats, and knowing how to recognize the signals and keep track of dispersed or remote working employees is a major part of prevention and protection to the enterprise.<\/span><\/p>\n A combination of training, organizational alignment, and technology is the right approach. Specifically, behavioral analytics technology that tracks, collects and analyzes user and machine data to detect threats within an organization is essential. This advanced technology determines anomalous from normal behaviors. This is typically done by collecting data over a period of time to understand what normal user behavior looks like, then flagging behavior that does not fit that pattern. It can often spot unusual online behaviors \u2013 credential abuse, unusual access patterns, large data uploads \u2013 that are telltale signs of insider threats. More importantly, it can often spot these unusual behaviors among compromised insiders long before criminals have gained access to critical systems.”<\/span><\/p>\n Torsten George is Cybersecurity Evangelist at <\/span>Centrify<\/span><\/a>.<\/span><\/p>\n \u201cAn insider threat can be a case of unwitting error, a disgruntled employee, someone within the organization looking to push the boundaries or make a quick buck, or a business partner who compromises security through negligence, misuse, or malicious access. So, what measures can organizations take to minimize their exposure to insider threats?\u00a0<\/span><\/p>\n The answer lies in limiting access and privilege<\/a>. Many organizations grant too much privilege to their staff, contractors, and partners, where traditional perimeter security will not protect them from an insider accessing critical data. Businesses need to adjust their security strategies to match modern threats, moving away from sloppy password practices and unsecured privileged access and shifting to focus on administrative access controls based on a least privilege approach.<\/span><\/p>\n Businesses can take the following steps to address insider threats throughout the month of September and beyond:<\/span><\/p>\n Gijsbert Janssen van Doorn is Director of Technical Marketing at<\/span><\/i> Zerto<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n \u201c2020 has brought significant changes to the workplace, including the wide-spread shift to a remote working environment for many companies.<\/span><\/p>\n So, it is not surprising that cybercriminals are taking advantage by executing ransomware attacks amidst this pandemic, as many organizations, especially those in healthcare or public sector, face enormous pressures to keep systems up and running. The likelihood of a payout increases with the urgency of the need for patient\/customer data to be secure\u2014serving to explain the 72 percent increase in ransomware attacks during COVID-19 and the 50% increase in mobile vulnerabilities.<\/span><\/p>\n Cybercriminals love to exploit vulnerabilities and\u00a0 individual employees are proving to be particularly vulnerable. These \u2018insider threats\u2019 are often unintentional and non-malicious. It\u2019s just employees who unknowingly open phishing emails or click on the wrong ad, etc. When these bad actors get in, they can then wreak havoc on an organizations\u2019 critical data and systems, and levy large financial costs and possible damage to your brand.<\/span><\/p>\n Protecting against the threat of ransomware requires ensuring employees know how to spot ransomware when they see it, but it also requires rethinking legacy data backup strategies to create a resilient IT for when employees do get fooled. By investing in continuous data protection for continuous availability, organizations can recover data files within seconds, and not worry about paying ransoms.<\/span><\/p>\n As the future of work remains uncertain, we anticipate more institutions increasing their cyber resilience through adoption of IT resilience solutions that can quickly and effectively provide an ability to recover after an attack. Afterall, in this game of cat-and-mouse, it is not a matter of if, but when your organization may be attacked. Once you\u2019ve been compromised, prevention is no longer an option. The best way to respond is to have a solid plan in place, be able to quickly recover your information without paying a ransom, and get your organization up and running as swiftly and painlessly as possible.\u201d<\/span><\/p>\n Thanks to our security experts for their time and expertise during Insider Threat Awareness Month 2020. To learn more, check out our Identity Management Buyer\u2019s Guide<\/a>.<\/span><\/i><\/p>\n
Widget not in any sidebars
<\/p>\nInsider Threat Awareness Month 2020: The Experts Comment<\/b><\/h2>\n
Orion Cassetto\u00a0<\/b><\/h3>\n
Torsten George\u00a0<\/b><\/h3>\n
\n
Gijsbert Janssen van Doorn<\/b><\/h3>\n
<\/div><\/p>\n
![\"Download](\"https:\/\/solutionsreview.com\/identity-management\/files\/2020\/01\/PAM_BG_SB_800.gif\" "\\"\\"")
<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"