How to Protect Against Insider Security Breaches - Use Multi-Party Authorization (
Page 3 of 3 )
Use Multi-Party Authorization
A better method for preventing
interior security breaches is Multi-Party Authorization (MPA). MPA
requires two or more people in order to allow access to a certain file
before it is opened. This is similar to bank accounts that require more
than one signature on the checks before funds are released. One person
can't do it on his or her own. This means that employee Harry, for
example, is prevented from getting into the details he wants, as
someone else will have to approve his access. And employee Jeff is also
prevented from getting into the wrong files by mistake.
The advantage that MPA has over
other methods of internal security is that it is proactive and prevents
data from ever being compromised, rather than dealing with the breach
after it has happened. And, unlike job rotation and duty separation,
MPA promotes teamwork and communication rather than hindering it.
MPA is suitable for all workplace
networks and can be used to protect any type of sensitive information,
ranging from salary details to personal communication. MPA is able to
work in real time, allowing businesses to run smoothly without any
unwanted holdups.
Craig Palmore is a co-founder and the Director of Business Development at Engedi Technologies.
His prior experience includes a variety of leadership positions in
finance, technology and engineering companies. Before co-founding
Engedi, Craig was a manager in the financial risk management group at
PricewaterhouseCoopers. Prior to that, Craig worked at KMV Corporation,
where he was responsible for marketing, sales, training and product
support to clients representing commercial and investment banks.
Earlier, at Swiss Bank Corporation, Craig assisted in the credit
management of industry portfolios. Craig also co-founded an engineering
consulting company in the early 1990s. Most recently, he was a
co-founder of a financial technology company in New York City, serving
the needs of commercial banks and fund managers.
Craig received a B.S. in Civil
Engineering from the Virginia Military Institute, and served six years
active duty with the United States Navy Civil Engineer Corps, with duty
assignments in Washington DC, Antarctica, Micronesia, and Hanoi,
Vietnam. Craig is a licensed Professional Engineer in the State of
Virginia, and received his MBA from the Fuqua School of Business at
Duke University. He can be reached at palmore@engedi.net.