News & Events: Press Releases - August 24, 2007
Q1 Labs Finds Internal Malicious Behaviour and Employee Carelessness to be the #1 Concern for Network and Security Managers
Survey Validates the Need for Identity and Access Management Integration with Monitoring Technologies
WALTHAM, Mass. - August 24, 2007 – Q1 Labs, a leading network security management company, confirmed that today's IT managers are plagued with insider threats and internal issues. Responding to these concerns requires more complete internal monitoring that integrates with identity and access frameworks to identify "who," and not just "what," is responsible.
A survey of more than 9,000 network and security managers from various industries and organizations found that more than 53 percent of respondents cited security mishaps originating from employees' careless or malicious behavior as their number one issue. The upsurge in internal threats or misuse is causing network and security managers to become as vigilant over their internal network and infrastructure as they once were over their network perimeter.
Guarded attentiveness requires a more diverse set of surveillance inputs, sophisticated analysis capabilities, and the ability to integrate with existing identity and access management (IAM) frameworks. As noted in a recent Gartner report (Security Information and Event Management Complement Identity and Access Management Audits by Mark Nicolett and Earl Perkinds, 13, August 2007), “Correlation and analytics can be used to join identity and access data from any sources, and across multiple systems and applications, to construct a complete view of an individual’s activity.”
According to Tom Turner, vice president of marketing, at Q1 Labs, "The old silo'd approach to monitoring network, security, and identity information separately is outdated and inefficient, especially in light of the recent rise of insider threats. A 'command and control' approach across both the network and security infrastructure that pinpoints user activity is imperative to network health and efficiency."
Additional Survey Results
Additional concerns reported by nearly 30 percent of the survey respondents include:
• Addressing auditors
• Hacking and Phishing
• Log Overload