In a short two years, it is safe to say that the prospect of cybercrime has suddenly shifted to be a top concern for many decision makers around the world.
It started with the explosive hacks that rocked companies like Sony, JP Morgan, Target, and other well-known brands. More recently, it was the release of thousands of hacked emails from the DNC and John Podesta, along with the allegations of Russian hacking, that has led the news cycle.
As a result, it is not surprising that much of today’s narrative on cybercrime is centered around the devastating potential of external threats to countries or businesses. The reality is, however, that there is a whole other side of things to consider.
In downtown Chicago, I picked up a flash drive off of a sidewalk. I checked the contents. It was highly sensitive data for a large financial institution. I called the company, and carried it in person to their office.
People talk about hacks, privacy and all that. But there is little mention of the insider that allowed it to happen, either on purpose or by accident. No matter how secure things can be made by policies, training, and technologies, it only takes one person to make everything we want to protect become insecure.