While scanning through various security posts I stumbled across an article that actually insulted me. The article was about how company executives believed 45% of their IT workforce would sell company data. Being an IT professional I couldn't believe these numbers so I decided to dig deeper into the article. After reading it, the article was focusing on the problem organizations have in managing identity and access. This has lead to experiences where half of the surveyed respondents admitted terminated employees have tried to access company information.

As organizations grow many companies have trouble deciding what information needs to be controlled and how to limit access to it. The growth of cloud technology has actually made the problem worse. Cloud based technologies are present in 84% of enterprise environments. In most cases major business processes are controlled by these cloud technologies and employees are allowed to access the data with their personal devices. If companies don't do a better job of controlling access they are setting themselves up for security breaches, fraud, and data theft.

To protect themselves companies really need to concentrate on securing their information. Processes need to be put in place to manage the use of personal devices as part of their access management strategy, automatically remove sensitive data from mobile devices and revoke employee access from all levels of the IT infrastructure. As cloud technologies continue to grow business are lagging behind in the oversight and security controls that are needed. Most employee's can be trusted with sensitive information but, enterprises still need to do their due diligence to protect themselves from the few they can't.


http://www.securityweek.com/it-workers-believe-employees-would-sell-company-data-if-price-right-survey