More than third (35 per cent) of IT staff have used their administration rights to breach data security, giving them access to critical corporate information without authorisation, according to research.
The study by Cyber Ark also suggests that nearly three-quarters of the 400 senior UK and US IT professionals polled said they could breach the security controls in place to protect against corporate information theft.
Asked what information they would take with them if made redundant, the three most popular responses were the customer database, the email server administrator account, and the firm's merger and acquisition (M&A) plans – all chosen by 47 per cent of those polled.
Next in line for potential theft were research and development (R&D) plans (46 per cent), the chief executive's password (46 per cent), financial reports (46 per cent) and the privileged password list (42 per cent). The corresponding figures for last year showed that the average increase in IT staff willing to take critical business data if made redundant was 28 per cent.
The survey suggests that firms need to fully monitor privileged account access, but 71 per cent of respondents indicated that privileged accounts were only partially monitored, and despite these controls, 74 per cent of those polled revealed that it did not stop them snooping around.
The significant failure of snooping controls was highlighted by the 35 per cent of IT administrators who admitted they were using high-level rights to access confidential or sensitive information. The most common areas targeted for snooping were HR records, followed by customer databases, M&A plans, redundancy lists, and marketing information.
"Unauthorised access to information such as customer credit card data, private personnel information, internal financial reports and R&D plans leaves a company vulnerable to a severe data leak with the risk of financial or regulatory exposure and damage to its brand, or competitors obtaining critically important competitive information,” said Udi Mokady, chief executive of Cyber-Ark.
Forrester Research provides five best practice tips for building IT security strategies 05 Mar 2009
Benchmarking study highlights where firms are failing 27 Feb 2009
Deloitte report warns of budgetary constraints and insider threats 04 Feb 2009
McAfee explains why it thinks a unified network security suite is the way forward 09 Jun 2009
Viktor Savtyrev threatened to bring down servers after being laid off 28 Apr 2009
IT staff admit to regularly accessing privileged information for personal gain 11 Jun 2009
Not tens, but thousands of clients affected 12 Mar 2010
And most contractors will see the end of cutbacks in hourly rates, says research 08 Mar 2010
New BPI stats show government crackdown has done little 20 Dec 2009
Desert tortoise fears allayed? 19 Mar 2010
Cameron presents pre-election energy policy, promising greater investment certainty for low-carbon projects, green loans for households, and streamlining of planning system 19 Mar 2010
Joint statement from carbon exchange and Hungarian government aims to restore confidence in CER market 19 Mar 2010
More news
From climate change contrarians to the "KitKatastrophe" of Nestle's palm oil policy, we look at the best the green web has to offer this week 19 Mar 2010
"It needs the political enthusiasm that was behind the war on terror after 9/11" 19 Mar 2010
From the government's plans for a marine energy revolution to John Lewis' proposals for an off-grid supermarket 19 Mar 2010 More in-depth
Post your comment
Send an email to the Business Green editor at feedback@businessgreen.com
