Security vendors love the rogue insider story. The data says otherwise: the typical case is an overworked analyst forwarding a spreadsheet to personal email to finish at home, or a departing employee copying a folder they think of as theirs.
Designing for humans
Controls that make the right path easy outperform ones that punish the wrong path. Remote access that actually works, clear ownership rules for documents and offboarding that starts before the last day remove most of the risk.
Key takeaways
- Negligence outweighs malice in exfiltration cases
- Usable remote access reduces shadow copies
- Offboarding should start at resignation
This story is part of our ongoing coverage of cybersecurity. We will update it as more details emerge.
