IT firms report widespread data risks
Firms are offloading data risk to IT providers, according to a new survey by data research institute Ponemon and governance software provider Aveksa
WALTHAM, MA & TRAVERSE, MI – IT providers are not being given enough information to mitigate the data risks of their clients, says a new study by data research institute Ponemon commissioned by governance software firm Aveksa.
The study, The 2008 National Survey on Access Governance, questioned 700 US IT practitioners on their information management relationships with their clients – the two largest employers being the financial services industry (21%) and government institutions (18%).
The survey says 78% of respondents thought employees are granted access to data for which they have no need, with inadequate tools in place to inform and update IT providers of employees’ specific and often evolving responsibilities.
“The IT security organisations are judged on how quickly they deliver access. There’s no automated process to engage a business unit to regularly review users’ access to different information resources. They’re using a manual approach – spreadsheets and email – and it is very inefficient,” says Brian Cleary, Aveksa’s vice-president of marketing.
IT practitioners cannot easily automate policy enforcement and require collaboration to understand what information is relevant for user access. It is not the job of a bank’s IT team to understand what information is pertinent for a retail teller’s role, says Cleary.
“They are not regulatory compliance experts. They need audit, risk and compliance to create a better collaborative framework for governing access.”
Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.
To access these options, along with all other subscription benefits, please contact info@risk.net or view our subscription options here: http://subscriptions.risk.net/subscribe
You are currently unable to print this content. Please contact info@risk.net to find out more.
You are currently unable to copy this content. Please contact info@risk.net to find out more.
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. Printing this content is for the sole use of the Authorised User (named subscriber), as outlined in our terms and conditions - https://www.infopro-insight.com/terms-conditions/insight-subscriptions/
If you would like to purchase additional rights please email info@risk.net
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. Copying this content is for the sole use of the Authorised User (named subscriber), as outlined in our terms and conditions - https://www.infopro-insight.com/terms-conditions/insight-subscriptions/
If you would like to purchase additional rights please email info@risk.net
More on Regulation
FRTB start dates must align globally, says European Commission
Lawmaker could trigger delay to market risk rules in Europe if US implementation drags on
Fed green lights more capital relief trades
Five US banks authorised to issue repeat credit-linked notes backed by financial guarantees
Basel III endgame: why moving fast might prove better for banks
Republicans are pushing for reproposal, but a rapid finalisation may prove less far-reaching
Isda pushes to ‘decouple’ Simm calibration from model changes
Emir 3.0 prompts effort to separate risk-weight revisions from methodology updates
Basel war on window-dressing may smooth liquidity, at a price
Changes to G-Sib charge could curb year-end repo volatility, but also cut balance sheet capacity
One year on, regulators still want a cure for bank runs
Broad support for higher outflow assumptions on uninsured deposits, but that won’t save insolvent banks
Watchlist and adverse media monitoring solutions 2024: market update and vendor landscape
This Chartis report updates Watchlist monitoring solutions 2022 and focuses on solutions for sanctions (name and transaction) screening and monitoring adverse media and its related elements
Basel Committee reviewing design of liquidity ratios
Focus on LCR and NSFR after Silicon Valley Bank and Credit Suisse, but assumptions may not change
Most read
- Breaking out of the cells: banks’ long goodbye to spreadsheets
- Too soon to say good riddance to banks’ public enemy number one
- Basel III endgame: why moving fast might prove better for banks