text: Insider Threat Research Reports and Surveys: The Top Facts | Information Security, latest Hacking News, Cyber Security, Network Security
  Home Internet of things Insider Threat Research Reports and Surveys: The Top Facts
  Already this year, we have a plethora of reports and surveys covering data breaches and insider threats. Don't have time to review them all? We've got you covered with this summary of key findings across 12 reports.
  Almost 58% of organizations that had security incidents over 2017 blamed them on insiders.
  45% respondents, whether or not they experienced a security incident, still see their own employees as the biggest threat to security.
  The majority of respondents have only partial visibility into what is happening in the cloud, and only 28% of organizations have visibility into IT staff activity.
  Kaspersky – The Human Factor in IT Security
  Kaspersky Lab and B2B International studied over 5,000 businesses around the globe and found:
  According to security professional respondents:
  53% of all attacks resulted in financial damages of more than US$500,000, including, but not limited to, lost revenue, customers, opportunities, and out-of-pocket costs.
  The most challenging areas and functions to defend are mobile devices, data in the public cloud, and user behavior.
  55% said their organizations had to manage public scrutiny of a breach in the last year.
  In 2017, 41% said that security breaches are driving increased investment in security technologies and solutions, up from 37% in 2016.
  Behavior analytics tools are useful when locating malicious actors in networks, with 92% of pros saying these tools work very to extremely well.
  Cisco threat researchers also examined data exfiltration trends, using a machine-learning algorithm to profile 150,000 users in 34 countries, all using cloud service providers, from January to June 2017. After profiling users for six months, researchers spent 1.5 months studying abnormalities, flagging 0.5 percent of users for suspicious downloads.
  These users downloaded, in total, more than 3.9 million documents from corporate cloud systems, or an average of 5200 documents per user during the 1.5-month period.
  Of the suspicious downloads, 62% occurred outside of normal work hours; 40% took place on weekends.
  One of the most popular keywords in the documents' titles was "data." The keywords most commonly appearing with the word "data" were "employee" and "customer."
  2018 Thales Data Threat Report, Federal Edition
  Rates of data breaches in the last year reported by federal survey respondents are 57% (versus 36% in the total sample), more than three times higher than the federal rate of 18% measured only two years ago.
  67% of respondents noted cloud privileged users as a top cloud security concern.
  McAfee: Economic Impact of Cyber crime — No Slowing Down
  Annual losses for the US are estimated at between $10 billion and $12 billion from cyber crime targeting IP and perhaps $50 billion to $60 billion globally.
  The FBI reported $209 million in ransom was paid in the first quarter of 2016, compared to just $24 million in ransom payments in all of 2015.
  The American Journal of Managed Care, study into data breaches in hospitals
  Researchers identified 215 breaches affecting 500 or more people, over the 7-year study period.
  Breaches occurred in 185 nonfederal acute care hospitals. Of these hospitals, 30 suffered more than one breach, while one hospital experienced four separate breaches.
  During the 2009 to 2016 study period, hospitals spent considerable budgetary funds upgrading their IT systems to meet electronic health records (EHR) requirements. Much less was spent on security during that time, despite the fact that cyber crime has been growing more sophisticated over the past decade.
  73% of studied organizations fell into the novice category, suggesting they have some way to go before they are cyber-ready.
  Organizations with fewer than 250 employees devote a smaller proportion of their IT budgets to cyber (9.8% on average versus 12.2% for larger organizations).
  For a small number of those hit by a breach, the impact went beyond the immediate cost in dollars and cents: 7% said they had lost customers as a result of a cyber attack and 5% said they had found it more difficult to attract new ones. A similar number said they had lost business partners. In 6% of cases the organization had laid off employees.
  57% of the organizations surveyed claim to be 'very confident' in their cyber security readiness.
  Identity Theft Resource Center Report: 2018 – Data Breach Category Summary
  So far in 2018, there have been 140 total breaches and 2,882,725 records exposed across the categories of Banking/Credit/Financial, Business, Educational, Government/Military, and Medical/Healthcare.
  The Business category led with 40.7% of the breaches. The Healthcare category followed with 28.6% of the breaches. In terms of exposed records, the Business category accounted for the vast majority of all exposed records at 74.2%.
  Accenture and the Ponemon Institute – The Cost of Cyber crime Study
  The average cost of cyber crime for financial services companies globally has increased by more than 40% over the past three years, from US$12.97 million per firm in 2014 to US$18.28 million in 2017
  60% of financial services companies' total security costs is spent on containment and detection of cyber breaches.
  The greatest impact of cyber breaches on financial services firms are business disruption and information loss, which together account for 87% of the cost to respond to cyber crime incidents, with revenue loss accounting for only 13%.
  The costliest types of attacks for banks and insurers are denial of services, phishing and social engineering, and malicious insiders. While malware attacks were among the least costly for financial services at $5.46 million per incident on average, malicious insiders cost $169 million, phishing/social engineering cost $196.6 million, and denial-of-service attacks $227.7 million.
  Only 26% of financial services companies have actually deployed AI security technologies, and fewer than one-third (31%) use advanced analytics to fight cyber crime.
  PwC – US State of Cybercrime Survey
  Security Scorecard: 2018 Healthcare Cyber security Report
  The healthcare industry ranks fifteenth in terms of cyber security health when compared to 17 other major U. S. industries.
  Beyond Uncle Sam, Analyzing the Security Posture of U.S. Government Contractors and Subcontractors
  Researchers found that nearly half of the contractors studied fell below a BitSight grade of C, with the Engineering and Manufacturing sectors exhibiting the lowest performance among the sectors.
  According to BitSight's analysis, nearly one in five users for Technology and Aerospace/Defense contractors use an outdated internet browser in the workplace, increasing the contractor company's exposure to compromise.