Story image

Singapore, Aus employees admit to snooping around corporate networks

24 Oct 2017

Employees in Singapore, Australia and across the globe are increasingly snooping their employer’s networks to deliberately seek information they are not permitted to access – and almost half of employees admit to doing so.

A new report from One Identity revealed that 94% of Singapore respondents said that employees in their organization try to access information that is not necessary for their day-to-day work, and 16% said it happens frequently.

When the employees themselves were asked, 47% of Singapore employees admit to looking for or accessing information about their company’s performance - information that is not required to do their job.

In Australia, 83% of respondents say their employees try to seek information and 65% of employees admit they have searched for or accessed information they did not need.

“Even though the majority of threats Australian organisations face due to their own employees tend to not be of malicious intent, the research shows a large amount of intrusive examining of information from employees when the data is outside of their responsibility. In reality, it could be that bit of intrusive meddling that puts organisations in a dilemma,” comments Richard Cookes, country manager ANZ, One Identity.

“Without proper authority of access permissions and rights, employees have a free-for-all to move about the business and access sensitive information such as financial performance data, confidential customer documents, or an executive’s personal files. If that valuable information ends up in the wrong hands, corporate data loss, customer data exposure or compliance violations are possible risks facing organisations that could result in irreversible damage to the business’s reputation or financial standing. The concern this should highlight is that organisations are very open to social engineering attacks where someone might join a company legitimately to attack it from within verses an external frontal assault. This makes protection of privileged access systems and applications from within even more important.”

IT executives are the most likely culprits by level: Globally, 71% of executives admit to seeking information, compared to 56% of non-manager-level IT security team members. Only 17% of non-manager team members admit to seeking information.

Smaller companies are also prone to bigger snoops: 38% of IT security professionals at companies with 500-2000 employees admit to snooping. At larger organisations, 29% of respondents admit to the deed.

“The alarming results of our study prove that employees in Singapore have a free reign to access sensitive information including financial performance data, confidential customer documentation, or even CEO’s personal files. Meddling with confidential information, even if it is non-malicious in intent, could lead to a serious damage to the business’s reputation and financial standing,” comments Lennie Tan, VP & GM of One Identity, Asia Pacific & Japan.

Globally, those who work for technology companies are more likely to search for information (44%), compared to 36% in financial services and 21% in healthcare.

“Businesses across the Asia Pacific region need to realize that potential cyber threats are not only coming from the outside of their organization,” Tan concludes.

Oracle updates enterprise blockchain platform
Oracle’s enterprise blockchain has been updated to include more capabilities to enhance development, integration, and deployment of customers’ new blockchain applications.
Used device market held back by lack of data security regulations
Mobile device users are sceptical about trading in their old device because they are concerned that data on those devices may be accessed or compromised after they hand it over.
Gartner names ExtraHop leader in network performance monitoring
ExtraHop provides enterprise cyber analytics that deliver security and performance from the inside out.
Symantec acquires zero trust innovator Luminate Security
Luminate’s Secure Access Cloud is supposedly natively constructed for a cloud-oriented, perimeter-less world.
Palo Alto releases new, feature-rich firewall
Palo Alto is calling it the ‘fastest-ever next-generation firewall’ with integrated cloud-based DNS Security service to stop attacks.
The right to be forgotten online could soon be forgotten
Despite bolstering free speech and access to information, the internet can be a double-edged sword, because that access to information goes both ways.
Opinion: 4 Ransomware trends to watch in 2019
Recorded Future's Allan Liska looks at the past big ransomware attacks thus far to predict what's coming this year.
Red Box gains compliance boost with new partnership
By partnering with Global Relay, voice platform provider Red Box is improving the security of its offerings for high-value and risk voice data.