Filed in archive Compliance by leon on February 15, 2006

IBM's Global Security Intelligence has warned that there will be a big shift in cybercrime this year. Along with mobile devices, instant messaging from botnets, blogging-led security leaks, insider attacks will be more of a threat as attacks shift from global outbreaks to more finely-targeted efforts.

Having a carefully-mapped out Sarbanes-Oxley strategy goes some way to addressing insider threats because insider attacks are so much more difficult to deal with than external threats. The linkage between insider threats and Sarbanes-Oxley compliance is spelled out here.

I have yet to be convinced it will stop insider attacks completely. The problem with systems is that people will always find a way around them if they really want and it depends how far they are prepared to go. Still, it does show how security strategy is another growth industry to come out of SOX.

Related Entries:

Sarbanes-Oxley: time's running out? - 24 March 2006
Sarbanes-Oxley and Small Firms: GAO report - 09 May 2006
New probe to change Sarbanes-Oxley: the fix is in - 13 September 2006
Subprime's parallels with Enron and WorldCom: Michael Oxley ... - 15 March 2008

« The seduction of Enron | Main | Business and government i... »

Permalink: Sarbanes-Oxley and Inside Jobs

Tags: insider threats IBM

Trackback: http://publish.creative-weblogging.com/publish/mt-tb.pl/15512

Addthis

Ask

Blinklist

del.icio.us

Digg

Fark

Facebook

Google

Lycos

Ma.gnolia

Mr Wong

Netscape

Netvousz

Newsvine

StumbleUpon

Slashdot

Tailrank

Technorati

Wink

Yahoo

Vote for Sarbanes-Oxley and Inside Jobs:

Currently 9.33/10
1
2
3
4
5
6
7
8
9
10

Rating: 9.33 out of 3 vote(s) cast.

Response from: Paul Fox (03/23/06 7:36am)

Most of the companies I talk to have spent thousands, sometimes millions for network & perimieter security, and most of the major breaches, and the rise of insider violations, go around just about any network security solution. Protect the core of your business - your databases - although database security is certaintly not new, it seems to be a low priority for most organizations, until they have a breach or audit failure.