Accidental security incidents involving workers happen more frequently and have the greater potential for negative impact than malicious insider attacks, according to new research from RSA.

The poll of 400 top level execs in the UK, France, Germany and the US casts doubt on the conventional wisdom that malicious insiders are the greatest single threat to an organisation. Accidental security breaches, inappropriate access and misuse of information by workers posed a greater threat to organisations' bottom lines than malicious insiders. However, security spending often focused on technologies designed more to thwart malicious insiders than accidental breaches.

Half (52 per cent) of those quizzed described insider threat incidents as predominately accidental, with only 19 per cent concluding that threats were deliberate. Two in five (40 per cent) of organisations intend to increase security spending while only six per cent intend to make cuts.

IDC concludes that organisations ought to apply a comprehensive risk management-based approach to information security, rather than firefighting security problems. ®

Related stories

• Slapdash staff blamed for third of UK's data leak balls-ups (21 March 2012)
• MPs obsess about expenses, ignore data security (22 February 2010)
• Raytheon unveils Linux 'Insider Threat' rooter-out routers (22 October 2009)
• Director misappropriated former employer's data, court rules (9 September 2009)
• Rogue admin charges cut to size (24 August 2009)
• IT workers grumble about lack of career path (21 July 2009)
• IT admin sentenced for sabotaging employer's network (15 July 2009)
• Security salaries hold up during economic gloom (29 April 2009)
• Loudmouth workers leaking data through social networking sites (28 April 2009)
• One third of workers open to bribes for data theft (22 April 2009)
• Immature tech likely to get lucky in credit crunch (28 October 2008)