Insider threat report: 61% of companies have had an insider attack in the past year

bigglass insider threats more than 70% of companies have an insider cyber attack

Bitglass released its 2020 Insider Threat Report, which uncovers the state of enterprise security as it pertains to insider threats. The report aims to understand how businesses balance budgetary and data protection concerns while defending against insider threats.

Employees, whether careless or malicious, can pose a great risk to organizations. A majority of survey respondents (61%) reported at least one insider attack over the last 12 months (22% reported at least six separate attacks).

Businesses are currently undergoing seismic shifts, including rapid migrations to the cloud and widespread adoptions of remote work and BYOD (bring your own device) policies. Along with these trends, securing against insider threats has become increasingly challenging. Most organizations cannot guarantee that they can detect insider threats stemming from personal devices (82%) or the cloud (50%), while 81% find it difficult to assess the impact of insider attacks.

Despite these concerns, few respondents have a single platform to manage all threats. When dealing with multiple disjointed tools that provide disparate levels of protection, security professionals spend an inordinate amount of time managing each of the solutions individually. As such, 49% of respondents stated that at least one week typically goes by before insider attacks are detected; additionally, 44% said that another week usually passes before the organization recovers from the attacks.

While organizations were already working with constrained security budgets before the pandemic, security teams are now being asked to do even more with less as 73% of companies’ security budgets are decreasing or staying flat over the next year.

To see all of Bitglass’ findings, download the full report here.

ON DEMAND: Business-impacting events such as severe weather, man-made disasters, and supply chain disruption are increasing in frequency and making impacts around the globe.

In today's rapidly evolving security landscape, organizations face an ever-growing array of disruptive events, security threats and risks. Traditional reactive approaches to security intelligence often leave businesses vulnerable and ill-prepared to anticipate and mitigate emerging threats that could impact the safety of their people, facilities or operations.