Latest News
5 Best Practices to Prevent Insider Threats in 2019
Reading Time: 4 minutes
Data breaches caused by insiders cost enterprises millions of dollars. According to the Ponemon Institute, every year, companies lose up to $8.7 million due to insider threats. To ensure an appropriate level of enterprise data protection, security officers continuously look for ways to improve their current insider threat management solution. With the following insider threat management best practices, you’ll be able to protect your sensitive business information and keep malicious insiders at bay.
1. Consider access controls
It’s essential to keep your critical assets inaccessible for malicious insiders. First and foremost, deploy multi-factor authentication (MFA) for the most valuable systems, applications, and services. Your goal is to make sure that any malicious insider won’t be able to borrow a password from their colleagues and get a hold of the data they aren’t supposed to have access to. Therefore, you need to look for an insider threat management solution with a built-in MFA functionality.
By implementing MFA, you can make sure that the person attempting to enter the protected perimeter are who they claim to be. At the same time, the use of MFA makes it way harder for malicious insiders to access your company’s sensitive information.
It’s also important to have a good password management policy in place. The most basic recommendations include forbidding the use of default and simple passwords and changing passwords upon certain events (say, employee resignation) or after some periods of time (say, every month or every quarter).
2. Limit access whenever possible
Once you managed to make sure that only the right people can get access to your network and critical assets within it, it’s time to think about the access permissions each of your company’s employees has. It’s best to take some technical measures to mitigate insider threats and deploy the so-called least privilege principle when employees only have the exact access level they need to do their job.
But today, more and more companies go even further and deploy a zero trust security model. In a zero trust network, there’s no general protected perimeter that distinguishes trusted insiders from untrusted outsiders. Instead, each critical asset or system is fully protected from both insiders and outsiders, thus mitigating internal and external threats to cyber security.
Such an approach works best for the companies that cooperate actively with third-party vendors and subcontractors. It’s also a great solution for the enterprises with a bring your own device (BYOD) policy in place, allowing their employees to use personal devices for work purposes.
3. Monitor employee activity
User activity monitoring is the basis of many insider threat protection techniques. You need to be able to see what’s going on within your network, in real-time at best. When choosing among the solutions to protect against insider threats in cybersecurity, pick the one that allows to see a particular user session and terminate it if necessary.
Many companies also look towards User and entity behavior analytics (UEBA) as the key to effective threat monitoring and protection against insider threats. Advances in machine learning technologies allow building user profiles that include normal baseline behavior patterns for particular users or roles. Registering activities that deviate from these patterns may help detect malicious insiders and mitigate possible threats at an early stage.
4. Analyze logs and respond to security incidents
Continuous user activity monitoring is meant to give you full visibility across the enterprise network and provide you with detailed data for further analysis. Depending on the user monitoring solution, user activity logs may contain different types of information:
Names of files and applications opened by the user:
- URLs to the visited websites;
- Logged keystrokes;
- Recorded sessions, and more.
The proactive incident response also plays a significant part in building an effective insider threat cyber security program. There’s no point in detecting a malicious action if you’re unable to respond to it properly and, therefore, prevent a data breach from happening.
Look for an insider threat prevention solution that allows you both receiving real-time notifications about the detected security incidents and automating responses to the most common types of incidents. For instance, if the system registers, say, three unsuccessful login attempts, the account a user tried to access will be blocked.
Finally, if you want to be able to analyze all of the logged information on a deeper level, make sure that your insider threat prevention solution supports forensic data export.
5. Pay special attention to third-parties
Remote access control and protection is an essential part of the modern insider threat management program. Today, more and more organizations hire remote employees and grant access to critical corporate resources to third-party vendors and contractors. But, as reported in a 2018 study by the Ponemon Institute, third-party vendors were the cause of nearly 60 percent data breaches.
If granting third-party vendors access to business-critical data, systems, and application is a common practice for your organization, make sure you have an appropriate third-party management solution in place. Leverage all of the above-mentioned tools and practices to protect your corporate data from unauthorized access and use.
If your third-party subcontractors are using a shared account for accessing your corporate network or business applications, it’s preferable to add secondary authorization as an additional protection layer. This way, you’ll be able to clearly associate each session initiated under the shared account with a particular user.
And, finally, make sure that your third-parties are well aware of your organization’s cybersecurity policy and know what cybersecurity rules they must follow.
Conclusion
Insider threats have one of the biggest impacts on enterprise cybersecurity. In order to mitigate the risks related to insider threats, organizations should deploy complex solutions that include monitoring and audit of user activity, granular access and privilege management, and effective incident response.
This article is a contribution from Marcell Gogan. Marcell is a specialist within digital security solutions, business design and development, virtualization and cloud computing, R&D projects, establishment and management of software research direction – working with Ekran System. He also loves writing about data management and cybersecurity.
Source: Latest News on European Gaming Media Network
This is a Syndicated News piece. Photo credits or photo sources can be found on the source article: 5 Best Practices to Prevent Insider Threats in 2019
Playtech has announced a new long-term partnership with Progress Play, selecting Playtech as their exclusive Bingo provider for their extensive network of brands.
This collaboration marks a significant milestone as Progress Play becomes the first white label network to launch Playtech’s brand new innovative Bingo platform, which went live in December 2024.
This strategic partnership strengthens the existing relationship between Progress Play and Playtech, further cementing Playtech’s Bingo position as the B2B market leader. By joining Playtech’s network, Progress Play will benefit from the largest B2B liquidity in the market, offering a wide variety of networked rooms that are well-known and loved by Bingo players.
As Progress Play embarks on its first-ever Bingo launch, they will work closely with Playtech’s Bingo experts to tailor the product to their specific needs. Playtech’s network management team will provide ongoing support and consultation to ensure the success of the Bingo offering.
The deal also includes a variety of side games featuring content from Playtech’s Eyecon studio, renowned for their industry-leading Bingo slots. Together, the Playtech and Progress Play teams will leverage the liquidity and these games with exciting campaigns already underway.
Marat Koss, VP of Interactive Gaming at Playtech, said: “We are delighted to welcome Progress Play to the Playtech Bingo network. We have enjoyed working together for many years, and we are excited to extend this partnership to Bingo vertical. By joining Playtech’s network, Progress Play will be able to offer a best-in-class bingo experience to their vast pool of players who will benefit from a wide choice of content, attractive prizes and large variety of games. We look forward to a continuing our long and successful partnership.”
Itai Loewenstein, CEO at Progress Play, said: “We are thrilled to extend our partnership and integrate Playtech’s innovative Bingo platform into our offerings. This collaboration allows us to deliver an unparalleled gaming experience and next level entertainment to our players. We look forward to the exciting campaigns we have planned together.”
The post Playtech Announces New Partnership with Progress Play appeared first on European Gaming Industry News.
Latest News
IGT Lottery Secures EL Responsible Gambling Certification for the Sixth Consecutive Time
International Game Technology PLC announced that its Italian subsidiary, IGT Lottery, obtained the European Lotteries (EL) Responsible Gaming (RG) Certification for the sixth consecutive time. Through an agreement between European Lotteries and the World Lottery Association (WLA), IGT Lottery has also obtained WLA Responsible Gaming Certification Level 4, the highest level available.
The EL RG Certification was developed to promote the adoption of RG best practices across EL membership organizations. The EL RG standards are also designed to be complementary to the WLA RG Principles and Framework, allowing companies that meet the implementation of the EL RG Standards to also achieve Level 4 certification of the WLA Framework.
“IGT Lottery achieving responsible gaming recertification by EL for the sixth consecutive time, paired with the highest level of WLA certification, showcases our status as a true global leader in sustainability. ‘Advancing Responsibility’ is vital to our success as a lottery company, and central to our sustainability strategy. We will continue to deliver innovation while operating with the highest level of integrity to protect our people, products and processes,” said Marco Tasso, IGT COO of Italian and International Sales and Operations.
IGT Lottery’s RG programme is guided by international best practices. Consistently updated to meet evolving standards, the programme operates on three macro guidelines: the promotion of a positive approach to gaming, the prevention of underage gambling and support for players who need it.
The EL RG certification was issued following an in-depth examination of IGT Lottery’s tools, activities and processes that comprise its RG programme in Italy. IGT Lottery was found to be fully in line with the international standards established by the EL, which require specific actions to protect players by the gaming operator, reaching a score of 100% for each of ten specified areas.
The post IGT Lottery Secures EL Responsible Gambling Certification for the Sixth Consecutive Time appeared first on European Gaming Industry News.
Latest News
Meridianbet Expands B2B Operations into Nigeria, Entering a Regulated $2 Billion Betting Market
Meridianbet, a subsidiary of Golden Matrix Group, Inc., has officially launched its B2B operations in Nigeria, one of the largest and fastest-growing betting markets in Africa. The company’s entry into Nigeria further strengthens its 20-year presence in Africa, leveraging its proven track record in regulated markets to deliver world-class gaming products.
Through its newly licensed local entity, Masterlive Network Limited, Meridianbet has secured full regulatory approval from the Lagos State Lotteries and Gaming Authority (LSLGA), allowing it to operate in both sports betting and online casino verticals under License No: LSLGA/OP/OSB/MB041124.
The official launch of Meridianbet.ng marks a strategic expansion into a market worth over $2 billion, according to the research of Orange Business Intelligence Technology, with over 60 million Nigerians actively participate in betting, contributing to one of the fastest-growing industries on the continent.
Zoran Milosevic, CEO of Meridianbet, commented: “Our expansion into Nigeria marks a significant step in our long-term strategy to deepen our presence in Africa’s most dynamic gaming markets. With a highly engaged player base and strong industry growth, Nigeria presents a major opportunity for our B2B model. We are committed to bringing our cutting-edge technology, AI-powered betting solutions, and localized expertise to drive long-term success for our partners in the region.”
FY 2024 Revenue Growth & Investor Outlook
Golden Matrix Group has provided a preliminary full-year 2024 revenue estimate of $150 million, reflecting the company’s continued growth trajectory. The Group expects to release its audited FY 2024 financial results in the coming days, offering investors a comprehensive performance overview. The Nigerian market represents a strategic opportunity for future revenue expansion, aligning with GMGI’s global strategy to strengthen its presence in high-growth gaming markets.
Key Market Potential & Strategic Expansion
According to the Orange Business Intelligence Technology (ORBIT), Nigeria’s betting industry surpassed $2 billion back in 2020, with projections indicating up to $4.7 billion in annual revenue potential over the next decade. Football remains the primary driver of market growth, with a vast customer base engaging both online and offline. Meridianbet’s B2B model will provide advanced technology solutions, gaming content, and platform services to local operators, offering a scalable and highly adaptable system tailored to the Nigerian market.
A Strategic Milestone in Meridianbet’s African Growth
With operations in 18 markets across Europe, Africa, and Latin America, Meridianbet has built a reputation as a leading technology provider and betting operator. The company’s expansion into Nigeria follows its long-standing success in established African markets, where it has been a dominant player for over two decades.
The soft launch of Meridianbet.ng is already delivering positive early results, with strong partner satisfaction and excellent customer feedback.
AI-Powered Innovation & Market Expansion
As part of this rollout, Meridianbet is introducing its proprietary AI Sports Betting Recommender and AI Casino Recommender, delivering personalized betting experiences based on real-time data, player behavior, and predictive analytics. These innovations, already proving successful in multiple markets, will enhance customer engagement, retention, and overall user satisfaction in Nigeria’s rapidly evolving gaming landscape.
The post Meridianbet Expands B2B Operations into Nigeria, Entering a Regulated $2 Billion Betting Market appeared first on European Gaming Industry News.
-
Latest News3 months agoGamCare releases Annual Report following record breaking year of support on the National Gambling Helpline
-
Latest News3 months agoKambi Group plc repurchase of shares during 18 December – 23 December 2024
-
Latest News3 months agoIndia Levels Up: Emerging as a Global Gaming Powerhouse in 2024
-
Latest News3 months agoImagine Live Partners with King.rs
-
Latest News1 month agoSportradar’s Alpha Odds Receives Dual Honors at European iGaming Awards 2025
-
Latest News1 month ago
Fall in Love with Nature’s Greatest Romantics This Valentine’s Day at Springbok Casino and Claim 25 Free Spins
-
Latest News1 month agoSwintt secured ISO 27001: 2022 certification
-
Latest News3 months agoBe victorious with VinciSpin, a brand-new online casino launched by Betmen Affiliates
You must be logged in to post a comment Login