IT Security & Network Security News & Reviews - eWeek




How to Protect Against Insider Security Breaches





  Table of Contents:
  1. How to Protect Against Insider Security Breaches
  2. Have an Auditing System in Place
  3. Use Multi-Party Authorization

One of the most common ways of preventing insider security breaches is to have an auditing system in place, which monitors who is doing what within the system. Another method of preventing insider security breaches is to implement a system of job rotation or separation of duties. But Multi-Party Authorization is a better method for proactively preventing insider security breaches because, as Knowledge Center contributor Craig Palmore explains here, Multi-Party Authorization requires two or more people in order to allow access to certain sensitive files.

How to Protect Against Insider Security Breaches - Use Multi-Party Authorization
( Page 3 of 3 )

Use Multi-Party Authorization

A better method for preventing interior security breaches is Multi-Party Authorization (MPA). MPA requires two or more people in order to allow access to a certain file before it is opened. This is similar to bank accounts that require more than one signature on the checks before funds are released. One person can't do it on his or her own. This means that employee Harry, for example, is prevented from getting into the details he wants, as someone else will have to approve his access. And employee Jeff is also prevented from getting into the wrong files by mistake.

The advantage that MPA has over other methods of internal security is that it is proactive and prevents data from ever being compromised, rather than dealing with the breach after it has happened. And, unlike job rotation and duty separation, MPA promotes teamwork and communication rather than hindering it.

MPA is suitable for all workplace networks and can be used to protect any type of sensitive information, ranging from salary details to personal communication. MPA is able to work in real time, allowing businesses to run smoothly without any unwanted holdups.

Craig Palmore is a co-founder and the Director of Business Development at Engedi Technologies. His prior experience includes a variety of leadership positions in finance, technology and engineering companies. Before co-founding Engedi, Craig was a manager in the financial risk management group at PricewaterhouseCoopers. Prior to that, Craig worked at KMV Corporation, where he was responsible for marketing, sales, training and product support to clients representing commercial and investment banks. Earlier, at Swiss Bank Corporation, Craig assisted in the credit management of industry portfolios. Craig also co-founded an engineering consulting company in the early 1990s. Most recently, he was a co-founder of a financial technology company in New York City, serving the needs of commercial banks and fund managers.

Craig received a B.S. in Civil Engineering from the Virginia Military Institute, and served six years active duty with the United States Navy Civil Engineer Corps, with duty assignments in Washington DC, Antarctica, Micronesia, and Hanoi, Vietnam. Craig is a licensed Professional Engineer in the State of Virginia, and received his MBA from the Fuqua School of Business at Duke University. He can be reached at palmore@engedi.net.



 
 
>>> More IT Security & Network Security News & Reviews Articles          >>> More By Craig Palmore
 

FEATURED SPONSOR MESSAGE

Microsoft Sponsored Resource Center

Increase Your Microsoft Office 365 Knowledge! Dig inside this suite of cloud-based collaboration tools.

Watch the video >>

Brought to you by





Advertisement
eWEEK Quick LInks

 
Close this advertisement