Insiders remain one of the most common security threats to organisations today.
This is according to Mark Logsdon, deputy head of group information risk management at Barclays, who presented a keynote address at ITWeb Security Summit 2008, in Midrand, this morning.
Logsdon noted that, as well as the usual problems of disgruntled workers, sometimes threats can come from ordinary employees.
"These are people just doing their jobs normally but making an occasional error."
To counter people problems that can cause security issues, Logsdon said Barclays looks at both organisational and individual aspects.
"In a company, there may be a lack of security culture or an environment of constant change, both of which can cause vulnerabilities. On an individual level, managers need to engage with people and be aware of their personal situation.
"Are they going through a divorce? A bereavement? Do they have money problems? There may even be no single factor that automatically makes someone an insider, it could be a whole host of reasons that collide."
Logsdon shared some high profile case studies of famous insiders, some of whom had been properly vetted and authorised before turning rogue.
Barclays has created an education campaign for its employees that warns of the dangers of sharing passwords and encouraging whistleblowers to speak up.
Share
