{"id":11476,"date":"2022-06-09T19:00:00","date_gmt":"2022-06-10T03:00:00","guid":{"rendered":"https:\/\/formtek.com\/blog\/?p=11476"},"modified":"2021-09-03T07:43:56","modified_gmt":"2021-09-03T15:43:56","slug":"security-insiders-are-the-number-one-culprit-behind-security-issues","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/security-insiders-are-the-number-one-culprit-behind-security-issues\/","title":{"rendered":"Security: Insiders Are the Number One Culprit Behind Security Issues"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Insider security threats are possibly the most difficult types of security incidents for companies to thwart.  More than half of companies<a href=\"https:\/\/www2.dtexsystems.com\/ponemon-state-insider-threats-2021-report\" data-type=\"URL\" data-id=\"https:\/\/www2.dtexsystems.com\/ponemon-state-insider-threats-2021-report\"> in a Ponemon survey<\/a> say that it is nearly impossible to prevent an insider attack.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Insider attacks can range from employee negligence to malicious actions often with the goal of financial gain, fraud and IP theft.  The majority of problems are due to human error or incidents like responding inadvertently to phishing or other types of social-based attacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.linkedin.com\/in\/paynejoe\/\" data-type=\"URL\" data-id=\"https:\/\/www.linkedin.com\/in\/paynejoe\/\">Joe Payne<\/a>, Code42 president and CEO, <a href=\"https:\/\/www.lightedge.com\/blog\/why-insider-threats-are-the-biggest-danger-to-your-data\/\" data-type=\"URL\" data-id=\"https:\/\/www.lightedge.com\/blog\/why-insider-threats-are-the-biggest-danger-to-your-data\/\">said that<\/a> &#8220;organizations are overlooking the most harmful data security threat: their own employees. While security leaders likely are aware of the problem, they may not grasp the sheer magnitude of it. And most have fallen behind in effectively detecting and responding to insider threats.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.linkedin.com\/in\/kimcrawley\/?originalSubdomain=ca\" data-type=\"URL\" data-id=\"https:\/\/www.linkedin.com\/in\/kimcrawley\/?originalSubdomain=ca\">Kim Crawley<\/a>, cybersecurity blogger\/journalist, <a href=\"https:\/\/www.tripwire.com\/state-of-security\/security-data-protection\/insider-threats-root-causes-mitigation-practices\/\" data-type=\"URL\" data-id=\"https:\/\/www.tripwire.com\/state-of-security\/security-data-protection\/insider-threats-root-causes-mitigation-practices\/\">said that<\/a> \u201cthe most dangerous aspect of insider threats is the fact that the access and activities are coming from trusted systems, and thus will fly below the radar of many detection technologies.&#8221;<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full\"><a href=\"https:\/\/formtek.com\/blog\/wp-content\/uploads\/2021\/09\/InsiderThreats.png\"><img loading=\"lazy\" decoding=\"async\" width=\"462\" height=\"448\" src=\"https:\/\/formtek.com\/blog\/wp-content\/uploads\/2021\/09\/InsiderThreats.png\" alt=\"\" class=\"wp-image-11478\" srcset=\"https:\/\/formtek.com\/blog\/wp-content\/uploads\/2021\/09\/InsiderThreats.png 462w, https:\/\/formtek.com\/blog\/wp-content\/uploads\/2021\/09\/InsiderThreats-300x291.png 300w\" sizes=\"auto, (max-width: 462px) 100vw, 462px\" \/><\/a><figcaption><a href=\"TripWire: Insider Threats: Root Causes and Mitigation Practiceshttps:\/\/www.tripwire.com\/state-of-security\/security-data-protection\/insider-threats-root-causes-mitigation-practices\/\" data-type=\"URL\" data-id=\"TripWire: Insider Threats: Root Causes and Mitigation Practiceshttps:\/\/www.tripwire.com\/state-of-security\/security-data-protection\/insider-threats-root-causes-mitigation-practices\/\">TripWire: Insider Threats: Root Causes and Mitigation Practices<\/a><\/figcaption><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.ponemon.org\/about\/our-leaders.html\" data-type=\"URL\" data-id=\"https:\/\/www.ponemon.org\/about\/our-leaders.html\">Larry Ponemon<\/a>, Chairman and Founder, Ponemon Institute, <a href=\"https:\/\/www.securitymagazine.com\/articles\/96002-enterprises-struggle-to-identify-insider-attacks\" data-type=\"URL\" data-id=\"https:\/\/www.securitymagazine.com\/articles\/96002-enterprises-struggle-to-identify-insider-attacks\">said that<\/a> &#8220;the vast majority of security threats follow a pattern or sequence of activity leading up to an attack, and insider threats are no exception. Many security professionals are already familiar with Lockheed Martin\u2019s Cyber Kill Chain and the MITRE ATT&amp;CK Framework, both of which describe the various stages of an attack and the tactics utilized by an external adversary. Since human behavior is more nuanced than machine behavior however, insider attacks follow a slightly different path and, therefore, require modern approaches to combat.\u201d<\/p>\n<div class=\"lightsocial_container\"><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/digg.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-insiders-are-the-number-one-culprit-behind-security-issues%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/digg.png\" alt=\"Digg This\" title=\"Digg This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-insiders-are-the-number-one-culprit-behind-security-issues%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/reddit.png\" alt=\"Reddit This\" title=\"Reddit This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.stumbleupon.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-insiders-are-the-number-one-culprit-behind-security-issues%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/stumbleupon.png\" alt=\"Stumble Now!\" title=\"Stumble Now!\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/buzz.yahoo.com\/buzz?targetUrl=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-insiders-are-the-number-one-culprit-behind-security-issues%2F&amp;headline=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/yahoo_buzz.png\" alt=\"Buzz This\" title=\"Buzz This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dzone.com\/links\/add.html?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-insiders-are-the-number-one-culprit-behind-security-issues%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dzone.png\" alt=\"Vote on DZone\" title=\"Vote on DZone\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.facebook.com\/sharer.php?t=&amp;u=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-insiders-are-the-number-one-culprit-behind-security-issues%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/facebook.png\" alt=\"Share on Facebook\" title=\"Share on Facebook\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/delicious.com\/save?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-insiders-are-the-number-one-culprit-behind-security-issues%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/delicious.png\" alt=\"Bookmark this on Delicious\" title=\"Bookmark this on Delicious\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dotnetkicks.com\/kick\/?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-insiders-are-the-number-one-culprit-behind-security-issues%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetkicks.png\" alt=\"Kick It on DotNetKicks.com\" title=\"Kick It on DotNetKicks.com\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/dotnetshoutout.com\/Submit?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-insiders-are-the-number-one-culprit-behind-security-issues%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetshoutout.png\" alt=\"Shout it\" title=\"Shout it\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-insiders-are-the-number-one-culprit-behind-security-issues%2F&amp;title=&amp;summary=&amp;source=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/linkedin.png\" alt=\"Share on LinkedIn\" title=\"Share on LinkedIn\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.technorati.com\/faves?add=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-insiders-are-the-number-one-culprit-behind-security-issues%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/technorati.png\" alt=\"Bookmark this on Technorati\" title=\"Bookmark this on Technorati\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/twitter.com\/home?status=Reading+https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-insiders-are-the-number-one-culprit-behind-security-issues%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/twitter.png\" alt=\"Post on Twitter\" title=\"Post on Twitter\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.google.com\/buzz\/post?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-insiders-are-the-number-one-culprit-behind-security-issues%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/google_buzz.png\" alt=\"Google Buzz (aka. Google Reader)\" title=\"Google Buzz (aka. Google Reader)\" \/><\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Insider security threats are possibly the most difficult types of security incidents for companies to thwart. More than half of companies in a Ponemon survey say that it is nearly impossible to prevent an insider attack. Insider attacks can range<span class=\"ellipsis\">&hellip;<\/span><\/p>\n<div class=\"read-more\"><a href=\"https:\/\/formtek.com\/blog\/security-insiders-are-the-number-one-culprit-behind-security-issues\/\">Read more &#8250;<\/a><\/div>\n<p><!-- end of .read-more --><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-11476","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/11476","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=11476"}],"version-history":[{"count":1,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/11476\/revisions"}],"predecessor-version":[{"id":11479,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/11476\/revisions\/11479"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=11476"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=11476"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=11476"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}