There’s a push within the last few years for organizations to spend the majority of their data protection efforts on the “Insider Threat” The data is subject to all types of threats ranging from man-in-the-middle attacks while in transit, to social engineering hacks while stored at the 3rd party’s network. This isn’t just about whether the data is being encrypted in transit to that third party, but very much about how that data is safeguarded all throughout its lifecycle. The appropriate security controls need to be enabled in order to counter those threats and mitigate the risks.”]
Source: https://www.csoonline.com/article/2129522/data-breach-risks–not-just-the-insider-threat.html