
employees, risk of liability due to employee behavior, or damage to
systems from employee error. As mentioned earlier, the job of
enforcing the policy and educating personnel usually falls on the
shoulders of an already burdened IT staff. Automated security tools
can inform and enforce, making a security program more efficient
while reducing the cost in person-hours.
14.4 Examining inside attacks
Recent industry surveys indicate that security breaches originating
from within an organization may account for up to 90% of all
incidents. These same surveys indicate the losses suffered from an
external intrusion amount to $90,000 on average and that the
average ...