Intelligent CISO Issue 47 | Page 37

With people now the new perimeter , we recommend layered defences , including a dedicated insider threat management solution and strong security awareness training .
FEATURE
Proofpoint , a leading cybersecurity and compliance company , has released its 2022 Cost of Insider Threats Global Report to identify the costs and trends associated with negligent , compromised and malicious insiders . Notably , on average , impacted organisations spent US $ 15.4 million annually on overall insider threat remediation and took 85 days to contain each incident .
The report , independently conducted by Ponemon Institute , is issued every two years and is now in its fourth edition . It surveyed over 1,000 IT and IT security practitioners across North America , Europe , Middle East , Africa and Asia- Pacific . Each organisation included in the study experienced one or more material events caused by an insider . The report reveals that over the last two years , contractors and third-party vendors , are an attractive attack vector for cybercriminals due to their far-reaching access to critical systems , data and infrastructure . With people now the new perimeter , we recommend layered defences , including a dedicated insider
With people now the new perimeter , we recommend layered defences , including a dedicated insider threat management solution and strong security awareness training .
threat management solution and strong security awareness training , to provide the best protection against these types of risks .”
Key findings of this year ’ s 2022 Cost of Insider Threats Global Report include :
Ryan Kalember , Executive Vice President of Cybersecurity Strategy at Proofpoint
the frequency and costs associated with insider threats have increased dramatically across all three insider threat categories , including : careless or negligent employees / contractors ; criminal or malicious insiders ; and cybercriminal credential theft .
“ Months of sustained remote and hybrid working leading up to ‘ The Great Resignation ’ has resulted in an increased risk around insider threat incidents , as people leave organisations and take data with them ,” said Ryan Kalember , Executive Vice President of Cybersecurity Strategy at Proofpoint . “ In addition , organisational insiders , including employees ,
• Organisations impacted by insider threats spent an average of US $ 15.4 million annually – that ’ s up 34 % from US $ 11.45 million in 2020 .
• The overall number of incidents has increased by a staggering 44 % in just two years . The frequency of incidents per company has also gone up , with 67 % of companies experiencing between 21 and more than 40 incidents per year , up from 60 % in 2020 .
• The negligent insider is the root cause of most incidents . A high number ( 56 %) of reported insider threat incidents were the result of a careless employee or contractor , costing on average US $ 484,931 per incident . This could be the result of a variety of factors , including not ensuring their devices are secured , not following the company ’ s www . intelligentciso . com
37