Why management Should care more about IT Security

IT security is often in danger of being one of those things that only the IT department cares about — often seen by the C-suite as simply a cost to the business that doesn't add to revenue streams.

With regard to internal security, for example, more than half of IT professionals believe that their senior management does not take enough responsibility for employee training, security policies or technology implementations to mitigate the insider threat.

The threat that employees pose is one of the most potentially dangerous to a business. It doesn't matter how good your network perimeter defenses, firewalls, antivirus software and threat-detection software are; if your employees fall for phishing scams, share passwords or still have access to company files once they've left, you're wide open to attack.

Which isn't to say that insider threat is not addressable, or that protecting company data is the only reason internal security is important. Here we explain why C-level executives should care more about IT security and, in particular, the insider threat.