3 ms·

I worked on a HIPAA application years and years ago. I don't think ANYONE was above having their access logged. I'm sure banks have also solved this problem t

• meowface 7y ago
  Of course. But the question is if a smart, malicious, dedicated insider with a lot of privileges could find some way to access information while evading logging and covering their tracks in other ways.
  • munchbunny 6y ago
    The answer is definitely yes. Though I feel obligated to add that I think the above fact doesn’t mean an organization shouldn’t try at all to protect against insider threat. Most are opportunistic, not all of the qualities you mentioned. How hard you try depends on your company’s situation. Some industries make it more necessary than others.