{"id":1909,"date":"2017-07-13T23:12:30","date_gmt":"2017-07-13T15:12:30","guid":{"rendered":"https:\/\/www.microdium.net\/public\/bci-organizations-leaving-themselves-vulnerable-to-data-breaches-by-former-employees\/"},"modified":"2017-07-13T23:12:30","modified_gmt":"2017-07-13T15:12:30","slug":"bci-organizations-leaving-themselves-vulnerable-to-data-breaches-by-former-employees","status":"publish","type":"post","link":"https:\/\/www.microdium.com\/public\/2017\/07\/13\/bci-organizations-leaving-themselves-vulnerable-to-data-breaches-by-former-employees\/","title":{"rendered":"BCI: Organizations leaving themselves vulnerable to data breaches by former employees"},"content":{"rendered":"
\"BCI:<\/div>\n
\n
The Business Continuity Institute<\/h5>\n

<\/p>\n

\"\"<\/p>\n

<\/p>\n

<\/p>\n

A large proportion of businesses fail to adequately protect their networks from the potential threat posed by ex-employees, with IT decision\u00a0makers surveyed\u00a0as part of a study by\u00a0OneLogin<\/a> claiming that\u00a0over half (58%) of former employees can still access the corporate network. The\u00a0study also found that\u00a0nearly a quarter (24%) of UK businesses have experienced data breaches by ex-employees.<\/p>\n

<\/p>\n

Nearly all (92%) of respondents admitted to spending up to an hour on manually deprovisioning former employees from every corporate application. Half (50%) of respondents are not using automated deprovisioning technology to ensure an employee\u2019s access to corporate applications stops the moment they leave the business. This deprovisioning burden may explain why over a quarter (28%) of ex-employee\u2019s corporate accounts remain active for a month or more.<\/p>\n

<\/p>\n

Also, the study revealed 45% of businesses don\u2019t use a Security Information and Event Manager (SIEM) to audit for application usage by former employees, leaving vital corporate data exposed to potential leaks.<\/p>\n

<\/p>\n

\u201cThe sheer level of data breaches revealed by our study, coupled with the revelation that many businesses are failing to put simple processes in place to promptly deprovision ex-employees, should raise serious alarm bells for business leaders,\u201d said Alvaro Hoyos, Chief Information Security Officer at OneLogin. \u201cOur study suggests that many businesses are burying their heads in the sand when it comes to this basic, but significant, threat to valuable data, revenue and brand image. There should be no excuse for this negligence, which will be brought further into the spotlight when the European Union\u2019s General Data Protection Regulation (GDPR) comes into effect in 2018. GDPR makes data protection a legal requirement for organisations, which could face fines of up to \u20ac20 million or 4% of their annual turnover, depending on which is higher.\u201d<\/p>\n

<\/p>\n

\u201cWith this in mind, businesses should proactively seek to close any open doors that could provide rogue ex-employees with opportunities to access and exploit corporate data. Tools such as automated de-provisioning and SIEM will help close those doors with ease and speed, while also enabling businesses to manage and monitor all use of corporate applications. The first step is acknowledging the problem, which businesses now have done by confessing they are aware of the issue, they now need to take steps to fix this issue by utilising the available tools,\u201d concludes Hoyos.<\/p>\n

\n<\/p><\/div>\n<\/div>\n


\nSource: DRJ New feed<\/p>\n","protected":false},"excerpt":{"rendered":"

The Business Continuity Institute A large proportion of businesses fail to adequately protect their networks from the potential threat posed by ex-employees, with IT decision\u00a0makers surveyed\u00a0as part of a study by\u00a0OneLogin claiming that\u00a0over half (58%) of former employees can still access the corporate network. The\u00a0study also found that\u00a0nearly a quarter (24%) of […]<\/p>\n","protected":false},"author":1,"featured_media":1910,"comment_status":"false","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[15],"class_list":["post-1909","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-disaster-recovery-cybersecurity-news-malaysia","tag-about"],"_links":{"self":[{"href":"https:\/\/www.microdium.com\/public\/wp-json\/wp\/v2\/posts\/1909","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.microdium.com\/public\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microdium.com\/public\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microdium.com\/public\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microdium.com\/public\/wp-json\/wp\/v2\/comments?post=1909"}],"version-history":[{"count":0,"href":"https:\/\/www.microdium.com\/public\/wp-json\/wp\/v2\/posts\/1909\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.microdium.com\/public\/wp-json\/wp\/v2\/media?parent=1909"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.microdium.com\/public\/wp-json\/wp\/v2\/categories?post=1909"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microdium.com\/public\/wp-json\/wp\/v2\/tags?post=1909"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}