Access and Feeds

Security: Employee Access to Data Too Often Far Exceeds What They Need to Know

By Dick Weisinger

Employees today often have access to information in their organizations that goes way beyond really what they need to be able to see.  A Ponemon survey sponsored by Varonis found that to be true across 71 percent of organizations.  And only 22 percent of employees thought that their organizations were really making an effort to protect company data.

Dr Larry Ponemon, chairman and founder of The Ponemon Institute, said that “employees commonly have too much access to data, beyond what they need to do their jobs, and when that access is not tracked or audited, an attack that gains access to employee accounts can have devastating consequences.”

Other results from the Ponemon study include:

  • Three quarters of organizations say that it’s hard to find or know where data is, a problem made worse by large amounts of email, presentations and multimedia files.
  • Half of organizations don’t require end users to request permissions to use a public cloud file syncing service
  • 68 percent say that sharing data with business partners, customers and vendors isn’t easy to do

Yaki Faitelson, CEO of Varonis, said that ‘there has been so much focus and investment on protecting the perimeter, but the most fundamental building blocks of security that protect the data inside – access controls and auditing – are often left behind.  Unnecessary access combined with a lack of auditing capability adds up to inevitable disaster.”

 

Digg This
Reddit This
Stumble Now!
Buzz This
Vote on DZone
Share on Facebook
Bookmark this on Delicious
Kick It on DotNetKicks.com
Shout it
Share on LinkedIn
Bookmark this on Technorati
Post on Twitter
Google Buzz (aka. Google Reader)

Leave a Reply

Your email address will not be published. Required fields are marked *

*