Employee missteps among top causes of data theft, says survey
MANILA, Philippines – Employee error is one of the main causes of internal IT security incidents which lead to the leakage of confidential corporate data, according to the findings of the Global Corporate IT Security Risks 2013 survey.
The survey was recently conducted by B2B International in collaboration with Kaspersky Lab, an online security company.
Although vulnerabilities in software used by company staff in their daily duties is one of the top reasons behind internal IT security incidents (with 39% of companies reporting this issue), the volume of different types of incidents taking place due to staff errors is equally high, the survey said.
Four out of five types of internal IT security incidents that took place at companies were closely related to erroneous employee actions, it said.
Approximately 32% of respondents reported leaks that took place as a result of employee mistakes. A slightly lower number of companies — 30% — reported incidents involving the loss or theft of mobile devices at the fault of an employee.
Intentional leaks were committed by employees at 19% of the companies participating in the survey. Incidents were caused by incorrect use of mobile devices (via mobile email clients or text messaging) at 18% of the companies surveyed.
At the same time, an average of 7% of respondents reported that employee actions were the cause of leakages of critically confidential information pertaining to company operations, the survey said.
Most often, leakages of critically sensitive data occurred when employees were at fault over the loss or theft of mobile devices — 9% of respondents reported these types of incidents, it said.
A comprehensive approach to a complex problem
Kaspersky Lab said these types of incidents can be eliminated – or at least the risk can be minimized. The security company said it can be done by taking a set of measures, including educating employees about IT threats, and developing, putting into place, and overseeing the enforcement of appropriate security policies within the company.
Another key step is the use of specialized security solutions, such as Kaspersky Endpoint Security for Business.
As a top-quality security platform, this Kaspersky Lab product includes a component that protects both desktop computers and mobile devices, and also offers the ability to effectively manage them.
The possibilities offered by this platform provide not only a top level of security for a corporation’s IT infrastructure, it will also help enforce a company’s IT security policies, and even compensate for them in the event that no such policies are in place.
Recent Stories:Meralco’s generation charge to rise by record P3.4/kwh 26 mins elapsed UP seeks help for ‘Yolanda’-affected students 31 mins elapsed Tax exemption for Pacquiao may be unjustified—Palace 1 hour elapsed San Sebastian deals first loss to San Beda in NCAA women’s volleyball 1 hour elapsed Discovery Suites brings tidings of comfort and joy this Christmas 1 hour elapsed Winner of P12.7B Multilotto to be known Saturday 1 hour elapsed Philippines mourns Mandela 2 hours elapsed Famous Indian singer arrested in PH 2 hours elapsed