|
Ideal Intrusion Defense Combines Processes And People |
|
|
|
Source: Search Security - Posted by Eric Lubow
|
A global IT service provider with 39,000 employees and thousands of computing devices is sure to be a tempting target for digital desperados. But which attack scenarios are most likely to keep the security chief up at night? Dave Bixler, CISO for Siemens Business Services Inc., a subsidiary of Munich-based Siemens AG, lists three:
# Spyware;
# Stolen or misplaced laptops with passwords that can be unlocked within minutes using any number of online tools; and
# Employees who load sensitive files onto USB keys and then lose them.
"You can go to any meeting and people toss these USB keys around," Bixler said. "I'm sure people leave them on airplanes and in hotel rooms with the data on them. I really worry about where my data goes and how to keep it from going where I don't want it to go." He's not alone. Of 307 IT professionals who responded to a February SearchSecurity.com survey about their intrusion defense programs, a majority said their biggest concerns are insiders whose computing habits put sensitive data at risk and the spyware and other malware they let in. Those are the threats they most want their intrusion defense tools to address, but they're not always pleased with the results.
Read this full article at Search Security
Powered by AkoComment! |
