4 ms·
The gist is that as long as your business model is collecting certain data that can be used to identify individuals you must cater for the insider threat and fo
by bestham 2y ago
The gist is that as long as your business model is collecting certain data that can be used to identify individuals you must cater for the insider threat and for instance implement segregation of duties. When you do not manage the risk of the data you’re collecting that’s when you end up together with ubiquity.
- Mashimo 2y agoWhat duties would you have split up in this instance?
- bestham 2y agoThe engineer that stole the data should have needed to collaborate with at least one peer to exfiltrate it. There should be no way for any individual to take this data and clear himself from the audit logs. Segregation of duties in this instance should have made it possible to detect the event quicker and attribute it to this particular employee.