U.S. Secret Service and CERT have studied insider threats since 2001, collecting information on 400 cases. Most companies that are victimized by insiders handle the matter internally, says CERT’s Dawn Cappelli. CERT identifies some of the most common mistakes companies make: inadequate vetting. Security consultants who helped clean up the messes would talk, but not the victims. You can’t rely on technology, or any single precaution to protect yourself from rogue IT people, warns CERT.”]
Source: https://www.csoonline.com/article/2126653/security-fail–when-trusted-it-people-go-bad.html