Now, in the age of the cloud, assumptions made about who the ‘insiders’ are need to be re-considered. The perimeters are shifting and, if our data is no longer under our own watchful eyes, what’s at risk when we don’t know and haven’t been responsible for hiring or vetting the very people entrusted to look after our most valuable asset?
After all, we can’t simply walk into the data centre and oversee the individuals that are responsible for managing our IT estate. So how do we regain control of the human risk of ‘insiders’ at third party providers?
