Introduction:. A “Scientist Not Only Identified People

Identity theft is the stealing and use of someone’s personal information and is one of the fastest growing crimes in the nation (Dole, 2005). According to Federal Trade Commission estimates, identity thieves victimize approximately 10 million Americans every year at a cost of an astonishing $50 billion (2005). Identity theft has been going on for years now and is easily done with the help of today’s technology. According to the Federal Trade Commission, there are six common ways that identity thieves get a hold of personal information. The varieties of methods that are used are dumpster diving, skimming, phishing, changing the victim’s address, stealing, and pretexting (Federal Trade Commission). Once someone’s identity is stolen,

Workers who are not prepared in security best practices and have feeble passwords, visit unapproved sites and/or click on connections in suspicious messages or open email connections represent a tremendous security danger to their bosses' frameworks and information. Answer for this issue is, train representatives on digital security best practices and offer continuous backing. A few representatives may not know how to ensure themselves on the web, which can put your business information at danger. It is crucial to hold instructional courses to help workers figure out how to oversee passwords and abstain from hacking through criminal movement like phishing and keylogger tricks. At that point give continuous backing to verify workers have the assets they require. Additionally verify workers use solid passwords on all gadgets. Information burglary is at high helplessness when representatives are utilizing cell phones (especially their

The first point of analysis is related to National Data Breach reporting which main goal is to protect consumers against identity theft and incentivize businesses for better cyber security. Businesses are required to inform the consumers if the intruder had access to the consumers’ personal information in order to prevent further damage or loss. The information security policy of State of Maryland is set forth to provide any data breach incident

The first of these threats is Social Engineering. Social Engineering according to Social-Engineer.org (2013), is “the act of influencing a person to accomplish goals that may or may not be in the ‘target’s’ best interest. This may include obtaining information, gaining access, or getting the target to take certain action.” The employees themselves are the area of the system affected by this threat. Social Engineering exploits their naivety. General lack of experience in recognizing this type of attack is a major reason for its success. Education on what Social Engineering is and how to recognize attacks coupled with company policies written, put into place, and enforced to prevent individuals from divulging or even having access to certain information no matter the scenario is the recommended course of action.

According to the survey, "Perceptions about Network Security," 90 percent of the 583 companies polled said they've suffered a network security breach at the hands of hackers at least once in the past year.

Employees - In the 2016 Cyber Security Intelligence Index, IBM found that 60% of all attacks were carried out by insiders. Employees can be a threat in various different forms such as getting manipulated by a cyber criminal for favours or any other reason. They can also download malicious content from

Statistics show that most security breaches are direct results of insider misconduct rather than being hacked. According to the most recent Verizon Data Breach Investigations Report, about “285 million records were compromised in 2008.” Seventy-four percent of the incidents were from inside sources. Users are more likely to be victims of computer virus infections, inquisitive students/co-workers, and hardware failures than to be victims of an Internet security attack.

Recently, the company has been the subject of a data breach in which confidential files in the network have been accessed by an unknown party. Upon investigation we have found that a supervisor that handles customer complaints received an e-mail from what appeared to have been a customer with a complaint regarding an error on the website. Upon investigation he found no such error, but did find that the return address did not exist. It is very likely the company has become the victim of one or more social engineers seeking to exfiltrate data from the company. It is believed that that source of the attack was a spear phishing campaign via the e-mail sent to the supervisor that oversees customer complaints. While supervisor e-mails are not normally

The data breaches of 2012 compromised almost twenty-eight million private records. The year 2015 is still underway, therefore no information gathered by Privacy Rights Clearinghouse so far for 2015 was utilized. Instead, as of 2014, there have been around four thousand data breaches made public since 2005, compromising about seven hundred thirty million private records. Of the four thousand public data breaches that have occurred between 2005 and 2014, one thousand six hundred public breaches are business-related, either through financial and insurance businesses, retail and merchant businesses among other types of businesses. Business-related data breaches between 2005 and 2014 constitute forty percent of the publicized data breaches,

Over the last few years the amount of security breaches that have been reported have had one factor that has been prevalent in majority of the attacks. That factor is the employee’s and how they are manipulated into giving the intruder/hacker exactly what they needed without realizing it. The use of social engineering in data breaches and fraud has been steadily increasing over the years. Confidentiality, integrity, and availability the three components of the CIA triad in network security can all be compromised by the risk of social engineering.

4. Security Awareness: A large percentage of successful attacks do not necessarily exploit technical vulnerabilities. Instead they rely on social engineering and people’s willingness to trust others. There are two extremes: either employees in an organization totally mistrust each other to such an extent that the sharing of data or information is nil; or, at the other end of the scale, you have total trust between all employees. In organizations neither approach is desirable. There has to be an element of trust throughout an organization but checks and balances are just as

Insiders represent the greatest threat to any information systems. The majorities of insiders have the proper security clearances, have signed the non-disclosure agreement, are firmly loyal to the United States, and know that they are obligated to protect the nation's secrets and sensitive information. The insiders are granted certain authorities and trust and have the ability to abuse their authorized access to exploit or otherwise misuse information systems. Imagine a federal employee is disdained of security practices that result in compromise or destruction of information. An example would be the recent top secret documents leaks that were stored in Secretary of State Hillary Clinton’s private unsecured server. According to recent news, there were at least 1,340 classified emails ranging from classification level of secret and top secret found in United States Hillary Clinton’s server. Another example would be the case of former CIA Director David Petraeus where he was prosecuted for intentionally sharing intelligence from special access programs with his formal biographer Paula Broadwell. For the federal department, unauthorized disclosure of classified materials could cause

Approximately 25,000 breaches in security have been documented since 2001. Internal security checks performed in 2015 were successful at passing security screenings with illegal contraband and gaining access to restricted areas 95% of the time. Some attribute this high fail rate to budget cuts and resulting layoffs while others believe the cause is complacency and low employee morale. (Issa, 2016)

source or from an external source, it is also important for a security organisation to reduce the

One of the benefits a business stands to gain, if they install a covert system within their property is the reduction of employee related theft incidents. If you own a business, you may not assume that you are at risk due to the perceived integrity of your employees. However, statistics demonstrate that UK based businesses loose an average of over 2 billion pounds each year, as a result of employee related theft. While this may not seem like a huge figure, when you consider the fact that 3rd party burglaries account for a loss of approximately 120 million pounds per year, what this means is that employees are a bigger risk to a company's property and assets, than a 3rd party would-be burglar.