Malicious Insiders are the most dangerous Threat Vector.
I really liked what the CIO Terrell had to say regarding Insider Threats.
I am constantly amazed how much leeway/freedom most enterprises give to employees in the name of flexibility or work-time balance today.
Even this whole BYOD/BYOA wave boggles the mind constantly.
Given how many more threat vectors this introduces into the Enteprise today I am amazed there are'nt more such Breaches getting reported on a daily basis today.
Still her interview was most-most insightful,especially HERE
Despite its size, Terrell insists Wal-Mart IT be able to implement systems rapidly and fix them quickly if things go wrong. It's part of how such a big chain survives smaller and lighter-footed competition. "The one protection that we really focus on at Wal-Mart is speed ... That means you're willing to try things. I know I'm looking at a lot of skeptical faces," she said from a stage that allowed her to view 150 of her peers.
By speed, Terrell was referring to IT's ability to implement new software quickly without disrupting production systems or implement new code in production systems themselves. "Imagine trying to roll out a point of sale change. If we were not expert at rolling it out and pulling it back, or rolling it out and fix, we would be releasing once or twice a year against our 100,000 of point of sale systems," she said.