USEUROPEAFRICAASIA 中文双语Français
Business
Home / Business / Technology

Enterprises prepare for insider threats to data

By WU YIYAO | China Daily | Updated: 2016-11-24 08:20

Insiders have become one of the largest threats to enterprises' critical digital and physical assets, according to research commissioned by EY, a consultancy services provider.

The study polled more than 665 senior executives in 17 countries and regions, including 40 professionals from China. More than 25 percent of respondents said they believe insider threats and illicit behaviors taking advantage of internet technologies are the fastest growing risk.

"About 70 percent of our services delivered to clients are focusing on illicit behavior taking advantage of internet technologies such as using loopholes in network systems and online payment schemes, particularly in fintech and online payment sectors," said Chen Zhi, an EY partner and expert in fraud investigation and dispute services.

More exposure amid increased connectivity is making it difficult to detect threats to critical assets, such as intellectual property, formulas, payment information, and clients' personal information, said Chen.

"It is not just an IT issue-it takes an enterprisewide approach including many human elements-to plan for, prevent, detect, respond to and recover from insider threats," said EY's research note on managing insider threats.

China's enterprises said they have increasingly invested in improving their organization's internet safety and internet security, including deploying more resources to build up their cybersecurity teams and use more third-party services, such as data monitoring, data recovery and user behavior pattern analysis.

On Nov 7, China's cybersecurity law was approved by the Standing Committee of the National People's Congress, China's top legislature. The law will come into effect on June 1, 2017.

"Having worked extensively with clients in APAC and China, we know the challenges they face managing data in legal proceedings and ensuring that privacy and state secrecy laws are respected. E-discovery solutions that allow clients to process data in the country and on-site at a company's premises in China are therefore essential," said Kate Chan, regional managing director in Kroll Ontrack's Asia Pacific practice, an end-to-end provider of electronic evidence services.

Even small-sized enterprises, such as startups, should bear in mind that computer forensics, e-discovery, and document review are important for protecting rights. They should start working with professionals, such as lawyers, at a very early stage of operations to ensure long-term growth and safety, said Chan.

Most Viewed in 24 Hours
Copyright 1995 - . All rights reserved. The content (including but not limited to text, photo, multimedia information, etc) published in this site belongs to China Daily Information Co (CDIC). Without written authorization from CDIC, such content shall not be republished or used in any form. Note: Browsers with 1024*768 or higher resolution are suggested for this site.
License for publishing multimedia online 0108263

Registration Number: 130349
FOLLOW US