Security threats explained: Internal negligence

13.06.2012

This collaboration did not just include internal staff but partners, customers and regulators. "Organisations need to ensure that the right processes, governance and technology are in place to meet these needs," he says. These processes include a complete view of the security environment, and security stack including network perimeter security, anti-virus, encryption tools, and data loss prevention (DLP) offerings to add an additional layer of advanced data monitoring system of the movement and storage of information.

"By proper classification, qualification and tagging of data, organisations can then monitor and mitigate the loss of data," Hue says.

Another way to address internal negligence was to minimise the access of sensitive data to only a selected group of individual. In addition, he advised that some organisations divide up responsibilities, so people did not have the access to all the information at hand to make disastrous negligence.

"Most importantly, employees need to understand that rules and guidelines are there, and enforced, for this specific reason and they need to be made aware of the consequences of what their actions may lead to," he says.

Follow Hamish Barwick on Twitter: @HamishBarwick