Enterprises Fail on Internal Security

For example, outsourcing is one of the chief vulnerabilities, according to survey participants. Yet 80 percent of the organizations surveyed aren't regularly assessing their outsourcer's compliance with security requirements and more than 70 percent of companies surveyed don't conduct extensive background security checks on outsourced employees.

Knowing about security risks is pointless unless you do something about them. Outsourcing partners should be given access to data on a "need to know" basis, with access-control policies in sync. And organizations must increase user security awareness--or face the consequences.