Of course Insiders Cause Fewer Security Incidents, I questioned the preponderance of insider threats. Adam Shostack cited a new paper titled A Case of Mistaken Identity? News Accounts of Hacker and Organizational Responsibility for Compromised Digital Records, 19802006 by Phil Howard and Kris Erickson. In 1980-1989accounts for 96% of records and 43% of incidents, while.accounts. for the remaining 4% of. records, along with 43%. of incidents. In 1990-1999accounts. for 45% incidents but the number of records is dwarfed by the number. of records lost in.”]
Source: https://taosecurity.blogspot.com/2007/04/response-to-adam-shostack.html