tag:blogger.com,1999:blog-5066603456638955842.post229095900651821294..comments2008-10-23T21:29:46.027+01:00Mark O'Neillnoreply@blogger.comBlogger1125tag:blogger.com,1999:blog-5066603456638955842.post-33723736437471758172008-10-23T21:29:00.000+01:002008-10-23T21:29:00.000+01:00What an unfortunate event.<BR/>However - there is no silver bullet.<BR/><BR/>In my experience there are 3 vulnerabilities for data loss:<BR/><BR/>1. IT operations (mis configuration, buggy apps, sloppy maintenance)<BR/><BR/>2. Trusted insiders - who use public web services - like cc'g files to their Gmail accounts so they can work at home<BR/><BR/>3. Malicious outsiders - who attack Web services in order to get at the data back end.<BR/><BR/>For all 3 vulnerabilities - I would recommend internal transaction monitoring on the network. <BR/>Danny LiebermanDanny Liebermanhttp://www.blogger.com/profile/17741370167050795019noreply@blogger.com