Becoming aware of the modern cyberthreat landscape means also becoming aware of its inherent irony. For all the talk of how sophisticated cyberattacks are rising to record levels, the number-one threat to a legal department and company is still its own employees. And while data security and privacy training is the first line of defense against negligent employee behavior, such training programs are falling short, according to “Managing Insider Risk Through Training & Culture,” a report by Experian and the Ponemon Institute.
The survey of over 600 IT professionals, C-suite executives, managers, and other high-level staff in various U.S. organizations found that slightly over half of organizations (55 percent) suffered a security incident or data breach due to malicious or negligent employee behavior. In addition, only 51 percent of respondents agreed that their organization’s data security and privacy program was effective.
