Chapter 4: Patching Layer 8
"Cybersecurity measures are frequently focused on threats from outside an organization rather than threats posed by untrustworthy individuals inside an organization. However, insider threats are responsible of many millions losses in critical infrastructure nowadays."
– Ricardo Gazoli – Head of IT executive
Users are, by far, the most vulnerable factor in cybersecurity. In fact, a recent study revealed that more than 50 percent of attacks are caused by insiders either by accident (inadvertent users) or intentionally (malicious insiders).
One common mistake is to prepare cybersecurity specialists to deal with technical challenges such as servers and networks, and not prepare them to address all the risks related to the human factor (inadvertent users and malicious insiders). In fact, many people agree that managing the users is far more complex than dealing with systems because, in the end, you cannot just simply patch them...
