Insider threats: Suffering from the detective's curse
Recent research shows 41 per cent of UK respondents stating that they have complete trust in employees with privileged access. This isn't a good position to be in.
Recently, I was watching an episode of the crime drama True Detective. The character Marty, played by Woody Harrelson, is discussing with his partner the concept of the ‘Detective's Curse'. This is when the answer to a complex case is under the detective's nose the whole time, yet they still can't see it.
In the IT security space, a certain degree of detective work is required. Think threat hunting and attribution. It's all about working from the big picture backwards. Examining every log to identify what went wrong, who gained access to which files and how. While most businesses consider external threats as one of the biggest challenges to their overall security and may focus their efforts here, perhaps they should start looking a little bit closer to home before pointing the finger at third-party vendors. Read more...