Study: Employees Weak Link In Cybersecurity

In a recent survey of corporate information security practitioners, 93 percent of companies perceived people to be the biggest weakness in information security, ahead of technology and processes. Meanwhile plaintiff cases in in cyber-breach lawsuits increasingly include allegations of negligence or failure to meet an acceptable standard of care on the part of data custodians. Cybersecurity firm Nuix, which published the study, predicts that companies that do not have an insider threat program are going to be legally required to adopt one, and that companies will begin to penalize employees who “misunderstand, misinterpret, or miscalculate longstanding security policies and procedures.”