Employee misuse has overtaken external hacking as the leading cause of cyber security incidents. Much of the misuse is not malicious, but involves staff by-passing security protocols through shadow IT, web access misuse or abuse of privileged accounts, creating opportunities for attackers.

