• Subscribe to our feed
  • Like us on Facebook
  • Follow us on Twitter
  • Join Us on LinkedIn

Insider Threat

The Costs of Insider Fraud

by Christine Meyers 21 December 2011

Information technology moves fast. Recent advances have led to streamlined business operations and innovative products and services. They have also opened up new avenues for fraud. Breach announcements disclosing information leaks and theft of privacy data are so commonplace, many of us turn a deaf ear to them and a blind eye to the underlying vulnerabilities they [...]

Read More →

4 Kinds of Enterprise Fraud (And How to Prevent Them)

by Christine Meyers 10 November 2011

Enterprise fraud and workplace policy abuse come in many forms, and every business is at risk.  Unfortunately, it’s not always obvious when workplace fraud occurs. Perpetrators are often insiders – long-time employees or trusted staff members who have access to sensitive information.  The very idea that these people would cheat you can be hard to [...]

Read More →

Considering Ethics in Security

by Christine Meyers 2 November 2011

Recently, on the heels of the ISSA International Conference, noted authority Michael Angelo raised the question of ethics in security. It is a topic that comes up from time to time and never ceases to fascinate me. In his recent blog posting, Michael writes “Ethics is a particularly interesting topic as the security industry is always [...]

Read More →

The Challenges of HIPAA Compliance

by Christine Meyers 25 October 2011

Meeting the Challenge of HIPAA Compliance HIPAA, the Final Privacy rule and various state regulations governing patient privacy all have one thing in common. They all require organizations to demonstrate access to PHI on a minimum need-to-know basis. That places the burden of governing access on the institution. In an audit situation, that means the [...]

Read More →

Ponemon: Real Risks of Insider Threats Often Stay Hidden

by Christine Meyers 18 October 2011

It’s easy to point fingers when another organization has an insider fraud incident. But information from the new Survey on the Risk of Insider Fraud by Attachmate Corporation and Ponemon Instituteshows that more organizations need to turn a scrutinizing eye toward their own risk. The survey encompassed more than 700 organizations and revealed some alarming [...]

Read More →

Check out the new 2011 Verizon Data Breach Report

by Christine Meyers 7 October 2011

The new Verizon report came out this week. Always a favorite, this report highlights insider fraud, breach risks and other useful data. Here are some of my favorite stats: • 83% of attacks were classified as “opportunistic” meaning the victim was identified because they exhibited a weakness or vulnerability that the attacker could exploit. (pg. 52) [...]

Read More →

We See Insider Fraud Every Day

by Christine Meyers 2 October 2011

Enterprise fraud and misuse is on the rise.  A recent study by the Ponemon Institute found that of the organizations surveyed, on average respondents experienced more than one incident of employee-related fraud per week – about 53 in a year’s time. Twenty-four percent of respondents indicated that their organizations experienced more than 100 incidents in the past 12 [...]

Read More →

Next Entries →