Feeds

Security: the enemy within

Execs miss internal threats

  • alert
  • submit to reddit

Internet Security Threat Report 2014

Senior managers are ignoring the internal risks to their computer systems, thinking instead that the biggest threats come from outsiders, says KPMG.

KPMG surveyed more than 1,200 IT directors and senior managers from some of the world's largest organisations, and found that 79 per cent believed that a security breach to one of their e-commerce systems would be the result of an external force.

KMPG's stud yhighlights a string of misconceptions and, in some cases ignorance, that may contribute to the security problem within organisations.

The majority of security breaches are caused by members of staff - and it seems strange that IT directors are unaware of this. The study also found that only 35 per cent of the organisations polled regularly run security audits; and only 22 per cent have 'forensic response experts' - whatever they are.

There is still a huge reluctance to report security breaches because of the damage it can do to the organisation - 72 per cent say this is their main worry.

One trend is important - 62 per cent of the organisations polled say that they always run checks when hiring IT staff.

The attacks, despite the security precautions of even the largest organisations, carry on regardless. Nine per cent say they have been attacked in the last twelve months. Unsurprisingly, 83 per cent of victims did not take legal action.

Companies should overcome their embarrassment and call in the police when rogue IT staff steal from them or sabotage their systems. In this way internal security breaches may be demoted from epidemic to occasional unfortunate outbreak.

© IT-Analysis.com. All rights reserved.

Remote control for virtualized desktops

More from The Register

next story
Webcam hacker pervs in MASS HOME INVASION
You thought you were all alone? Nope – change your password, says ICO
You really need to do some tech support for Aunty Agnes
Free anti-virus software, expires, stops updating and p0wns the world
USB coding anarchy: Consider all sticks licked
Thumb drive design ruled by almighty buck
Attack reveals 81 percent of Tor users but admins call for calm
Cisco Netflow a handy tool for cheapskate attackers
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
prev story

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.