Joined: 26 Jun 2004
Location: Indiana, USA
|Posted: Wed Dec 09, 2009 9:35 am Post subject: Workers All Too Ready To Steal Company Data
|This is very startling! I read this and immediately called out tech people. They recommended a device called Code Green. We have been using it for only a month and we have already caught a lot of things that should not have gotten out of our facility!
(By the way, our rep is Mike Mitchell at Network Solutions Inc. 574-271-0900, he specializes in manufacturing network solutions.)
Workers All Too Ready To Steal Company Data
The numbers at a glance:
85% Admit to knowing that downloading corporate information from their employer is illegal
25% Say they would take the data anyway regardless of the penalties
41% Admit to having taken sensitive data with them to a new position
26% Say they would pass on company information if it proved useful in getting friends or family a job.
48% Admitted if they were fired tomorrow they would take company information with them
39% Admit they would download company/competitive information if they got wind that their job were at risk
64% Admit they would take data "just in case" the data might prove useful or advantageous in the future.
27% Said they would use the stolen data to negotiate their new position
20% Plan to use the stolen data as a tool in their new job
29% Said that Customer and contact lists were the top priority for them to steal
18% Said that they would take Plans and proposals
11% Said they would take product information
13% Said they would take access and password codes so they could get into the network once they've left the company and continue downloading information and accessing data.
67% Of companies surveyed think a half or less of employee fraud cases are actually caught.
29% Of companies surveyed use the latest generation of tools to protect against employee fraud.
The Details are in the following Text
Employees know it's illegal to steal company data, but they're prepared to do it anyway. Companies know their employees are a chief threat to their data, but most aren't doing much about it.
These are the takeaways from two separate studies published today by security vendors Cyber-Ark and Actimize. Taken together, the studies paint a sobering picture of the state of trust and security within the corporate walls.
In its study, Cyber-Ark surveyed some 600 workers in the financial districts of New York and London and found that most workers are not shy about taking work home -- and keeping it for their own use.
Eighty-five percent of the respondents to the Cyber-Ark survey said they know it is illegal to download company data for personal use, but 41 percent said they already have taken sensitive data with them to a new position. About a third of respondents said they would share sensitive information with friends or family in order to help them land a job.
Almost half of the respondents (48 percent) admitted if they were fired tomorrow they would take company information with them, Cyber-Ark says. Thirty-nine percent of people would download company/competitive information if they got wind that their job were at risk. A quarter of workers said the recession has made them feel less loyal toward their employers.
Of those who plan to take competitive or sensitive corporate data, 64 percent said they would do so "just in case" the data might prove useful or advantageous in the future. Twenty-seven percent said they would use the data to negotiate their new position, while 20 percent plan to use it as a tool in their new job.
Customer and contact lists were the top priority for employees to steal, registering 29 percent of the respondents. Plans and proposals were next (18 percent), with product information bringing up the rear (11 percent). Thirteen percent of savvy thieves said they would take access and password codes so they could get into the network once they've left the company and continue downloading information and accessing data.
According to the second study, which was compiled by security vendor Actimize, most companies know about the threat from employees and are worried about it.
Eighty-two percent of those surveyed, approximately a quarter more than in 2007, see the threat of employee fraud growing, and 78 percent see the employee fraud problem increasing due to the slower economy.
The Actimize study, which was conducted by third-party firm Infosurv, found more than 69 percent of respondents view full-time employees as the highest risk segment -- seven to 14 times more risky than part-time, offshore, outsourced, or temporary employees.
The respondents to the Actimize survey, who all came from the financial services industry, are increasingly alarmed with employee sabotage, Actimize said. Seventy-two percent of respondents stated they are moderately to extremely concerned that laid-off or disgruntled employees will plant malicious software scripts or destroy company property.
Eighty-four percent of the financial respondents said the industry is likely to experience a rogue trading loss of more than $100 million in the next 12 months, as it did last year at Societe Generale.
While fears of insider threat run high, however, many companies appear to be at a loss as to what to do about it. Sixty-seven percent of those surveyed think a half or less of employee fraud cases are actually caught. When ranking top ways they uncover employee fraud, 34 percent admitted they discovered the fraud "accidentally."
More than three-quarters of respondents said the nature of employee fraud is becoming more sophisticated, yet less than 30 percent use the latest generation of tools to protect against employee fraud, Actimize said. This is actually a significant improvement from 2007, when only 8 percent used the latest generation of technologies to combat employee fraud.
Fifty-eight percent of respondents rated the financial industry's ability to detect employee fraud as "poor" or "somewhat acceptable," which is also a noticeable improvement from 2007.
"As the research shows, regardless of the direction the economy takes in the near future, financial institutions are expected to be increasingly concerned about the threat of criminal employee behavior," said Paul Henninger, head of the financial crimes product group at Actimize. "Luckily, there is evidence that the industry is improving its ability to investigate and catch employee fraud."
Separate studies offer a scary glimpse into the minds of employees, management
By Tim Wilson, DarkReading
Nov. 23, 2009
Copyright © 2007 CMP Media LLC