Government Technology

NASCIO Releases Insider Security Threats Brief



April 18, 2007 By

The National Association of State Chief Information Officers (NASCIO), which represents the chief information officers (CIOs) of the states, released today Insider Security Threats: State CIOs Take Action Now!

This brief examines the often overlooked threats from within. Attention has focused primarily on external threats with federal government and industry reports revealing alarming hacking and identity theft statistics. However, threats from within both public and private sector organizations may be even more prevalent than external threats and can have equally if not more serious consequences.

"While technology has allowed state government employees to work-on-the-go and online citizen services are available around the clock, these advances have contributed to greater opportunities for security breaches. In many instances, these risks are the consequences of technological convenience afforded to those inside state government," said Brenda Decker, Chief Information Officer for the State of Nebraska and NASCIO Security and Privacy Committee Co-Chair.

This brief discusses five significant insider threats and provides insight on ways to prevent, detect and respond to them. The threats are as follows:
  • Malicious Employees
  • Inattentive, Complacent or Untrained Employees
  • Contractors and Outsourced Services
  • Insufficient IT Security Compliance, Oversight, Authority and Training
  • Pervasive Computing-Technology is Everywhere and Data is on the Move
"State managers and employees have a greater responsibility than ever to protect state technology resources and minimize the insider threat. It's everyone's job," said Thomas Jarrett, Chief Information Officer for the State of Delaware and NASCIO Security and Privacy Committee Co-Chair. "This brief highlights ways that the State CIOs can foster a culture of security that is consistent across the state enterprise."


You may use or reference this story with attribution and a link to
http://www.govtech.com/security/NASCIO-Releases-Insider-Security-Threats-Brief.html


| More
You May Also Like

Comments


Add Your Comment

You are solely responsible for the content of your comments. We reserve the right to remove comments that are considered profane, vulgar, obscene, factually inaccurate, off-topic, or considered a personal attack.

Sponsored Links



Phone RSS

Government Best Practices

» A New Model for Human Resources
» Abandoning the High Cost of Enterprise Content Management