Issue link: https://insights.oneneck.com/i/1477879
Unfortunately, it's probably impossible to completely put a stop to internal security threats. You just can't predict when an employee might go rogue. Sure, there are occasionally signs that an employee might have bad intent, but even if you notice that something seems amiss it's hard to predict what that employee might actually do. One of the most important things that you can do to counter internal security threats is to establish a really solid backup and disaster recovery plan. Backups won't stop a rogue employee from doing something malicious, but they will give the organization a way of putting things back to normal if such an incident should occur. Reason 5: External Security Threats Just as security threats can originate internally with a rogue employee, security threats most often come from the outside world. These are the types of threats that people seem to be the most familiar with. I'm talking about things like data breaches and ransomware attacks, here. And, with cybercriminals focusing on capturing online credentials in 57% of attacks 1 , the threat to Microsoft 365 and, specifically, Teams data is real. The only way to truly keep cyberattacks at bay is to adopt a zero-trust security model. Unfortunately, zero trust security simply is not a good fit for every organization because it can be disruptive to business processes and can get in the way of things that employees are trying to do. The best thing that an organization can do to counter external security threats (short of employing a zero-trust security model) is to practice defense in depth. If you're not familiar with defense in depth, it's based on the idea that you shouldn't 1 GreatHorn, 2021 Business Email Compromise Report (2021)