#SecurityNews: “Insider with privileged accounts often access sensitive info they don’t need”
Every company has a group of trusted insiders with privileged access to corporate IT networks. But for IT executives, there continue to be challenges associated with proper identity and privilege management, and insider threats continue to be a serious threat vector for organizations.
Results from BeyondTrust’s “Privilege Gone Wild” report show that privileged users are “out of control.” On a regular basis, employees are granted excessive privileges and access for their particular roles, resulting in unnecessary risks to organizations. Overall, 44% of employees in the survey said that they have access rights that are not necessary to their job.
One of the most startling statistics from this survey reveals that 28% of respondents admitted to having retrieved information not relevant to their job. When asked what information was accessed, nearly one-quarter identified financial reports and almost half provided written responses specifying salary details, HR data and personnel documents