Safeguard Email From Internal and External Threats
Safeguard Email From Internal and External Threats
Email continues to be a major source of cyber-attacks, and security and risk officers need to be more aware of both outside attackers and internal threats.
Information Theft Via Email
33% of the security and risk professionals surveyed have experienced information loss, theft or attack via email within the last two years.
The Breakout of Attacks
Phishing attacks leading to malware infection or data loss: 44%,
Business email compromise or impersonation: 40%,
Insiders emailing sensitive data outside the company: 36%
Internal Threats in the Past Two Years
Compromised accounts by insiders: 63%,
Careless misuse: 57%,
Malicious insider incidents: 41%,
No insider incidents: 1%
The Phishing Threat
Four out of 10 companies surveyed reported a phishing attack in the past two years.
Financial and Productivity Losses
75% of respondents said compromised accounts had a significant or moderate financial impact. 68% said they had a significant or moderate impact on productivity.
Levels of Concern
77% of respondents are concerned or very concerned about compromised accounts, 61% share the same level of concern for careless misuse, and 55% share the same level of concern about malicious insiders.
Monitoring the Problem
70% of respondents use network monitoring to monitor, block or respond to internal email threats; 66% use a secure email gateway; and 62% use data loss prevention tools.
Old Technologies Used for New Threats, Part 1
Anti-spam: 62%,
Anti-virus: 57%,
Anti-phishing: 52%,
Privacy controls: 48%,
Data loss prevention inspection: 45%
Old Technologies Used for New Threats, Part 11
Threat visibility and response: 44%,
Multi-factor authentication: 42%,
Automatic blocking malicious emails: 42%,
Sandboxing: 32%
New Tactics Overlooked
Sandboxing, multifactor authentication and automatic blocking of malicious emails are critical to defend against sophisticated attacks, yet fewer respondents are using these security tools.
