Verizon Business released its annual Data Breach Investigations Report in July. Organized crime was responsible for 85 percent of all stolen data in 2009. 50 percent of breaches investigated by Verizon and the Secret Service in 2009 were attributed to insiders. The PCI Security Standards Council announced a summary of expected changes to the PCI DSS and the Payment Application Data Security Standard. Debbie Christofferson: “All of your decisions about information security should be based on risk to the organization” There are 100 different definitions for what risk management means.”]
Source: https://www.healthcareinfosecurity.com/blogs/on-insider-threat-pci-risk-management-p-698