The Danger from Within

✍ Scribed by Upton David M., Creese Sadie.

• Tongue: English
• Category: Library

✦ Synopsis

Статья из журнала: Harvard Business Review. — 2014. — September.
(В файле 7 стр.).

Об инсайдерских атаках (угрозах информационной безопасности компании со стороны ее сотрудников).
The 2013 cyberattack on Target is just one recent example of a growing phenomenon: attacks involving connected companies or direct employees. According to various estimates, at least 80 million of these attacks occur in the United States each year—but the number may be much higher, because they often go unreported.
Upton and Creese head an international research project whose goal is to aid organizations in detecting and neutralizing threats from insiders. Their team includes computer security specialists, management educators, psychologists, and criminologists, among others, and their findings challenge conventional views and practices. The doors that leave organizations vulnerable to insider attacks, they write, are mundane and ubiquitous.
In this article they discuss the causes of growth in the number of insider cyberattacks, the reasons behind them, and five ways to tackle the problem: Adopt a robust insider policy at every level of the organization; raise awareness of phishing and other ploys; screen new hires thoroughly; employ rigorous subcontracting processes; and let employees know that you will observe their cyberactivity to the extent permitted by law.
David M. Upton is the American Standard Companies Professor of Operations Management at Oxford University’s Saïd Business School. Sadie Creese is the professor of cybersecurity at Oxford and director of its Global Cyber Security Capacity Centre. Upton and Creese are principal investigators in the Corporate Insider Threat Detection research program.

✦ Subjects

Информатика и вычислительная техника;Информационная безопасность