|
By Michael Eggebrecht
Financial firms have relatively strong perimeter defenses against viruses and malware, according to a survey of information security vendors. Now, the financial sector needs to focus its attention on internal data loss.
"Internally controlling and recording access to sensitive information is becoming mission-critical," said Nick Holland, senior analyst at research firm Aite Group, in a statement. Holland spoke with about two-dozen vendor employees, more than half of whom pointed to internal data breaches--both malicious and accidental--as financial firms’ biggest vulnerability.
The report cautions that data-loss prevention (DLP) software may be an "under-marketed area" that technology providers are hyping. However, it adds, "few of the vendors interviewed had DLP solutions and [they] were not product pitching. Instead, there seems to be a legitimate concern that data access privileges are out of control."
Are the concerns consistent with those of financial institutions? External attacks are probably more of a priority, Holland told CIOZone, particularly in the wake of the data breach at Heartland Payment Systems. But, he said, "with employees literally given the keys to the safe, and with the current economic climate causing a culture of insecurity for employees, financial institutions are increasingly concerned about insider data leakages."
CIOs and chief information security officers have to balance data security with demands from the business for systems that are convenient and accessible. According to vendor respondents, DLP technology, which provides access controls and audit trails for employee activity, is an area in which firms are willing to invest, even in the current environment.
"We have found that the case has to be well made and ideally indexed to ROI," said Holland, "but where the technology is seen as mission-critical, procurement is made possible."
Still, 60 percent of survey participants said that obtaining resources is the biggest issue for CISOs. "Budgets are hard to justify internally when threats are hypothetical rather than real," says the report. "Making the case for resource allocation is a constant struggle, particularly in an economic environment in which budgets are increasingly scrutinized for excess fat.
Only registered users can write comments.
Please login or register. |
