- \n
- Hardly detectable data misuse can lead to data breaches, fines due to non-compliance with data privacy regulations, and reputational damage.<\/li>\n\n\n\n
- Information can be misused for personal gain, due to carelessness, or in violation of consent.<\/li>\n\n\n\n
- To prevent data misuse, organizations must control access, track user actions, implement alerts on suspicious activity, and improve employee awareness.<\/li>\n\n\n\n
- Implementing cybersecurity solutions like Syteca allows you to monitor all user actions with sensitive data, secure access to it, and get notifications about potential threats.<\/li>\n<\/ul>\n\n\n\n
What is data misuse?<\/h2>\n\n\n\n
The definition of data misuse<\/strong> is pretty simple: using any information in a way it\u2019s not supposed to be used. Terms of proper data use are usually spelled out in laws, industry standards, corporate policies, and user agreements.<\/p>\n\n\n\n
Data misuse is often associated with employee data theft<\/a> and data exfiltration<\/a>. However, information isn\u2019t always stolen or moved to third parties in the case of data misuse.<\/p>\n\n\n\n
In some cases, data misuse can lead to a data breach<\/strong>. For example, an employee can copy data to a flash drive for personal use but lose it, resulting in a data leak. Or an employee can send data to their personal laptop, which can be hacked.<\/p>\n\n\n\n
What are the types of data misuse?<\/h2>\n\n\n\n
There is a strong correlation between data misuse types and the reasons behind them. The most common types of misuse of information include:<\/p>\n\n\n\n\t\t
\n\t\t\t\n\t\t\t\n\nTypes of data misuse<\/p>\n\n\n\n\t\t
\n\t\t\t\n\n\t\t\t\n\n\t\t\n\t\t\t\n\t\t\t\n\n\t\t\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nData misuse for personal gain<\/p>\n\n\n\t\t\t \n\t\t<\/div>\n\t\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\t\t\t\n\n\t\t\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nData misuse due to carelessness<\/p>\n\n\n\t\t\t \n\t\t<\/div>\n\t\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\t\t\t\n\n\t\t\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nData commingling<\/p>\n\n\n\t\t\t \n\t\t<\/div>\n\t\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\t\t\t \n\t\t<\/div>\n\t\n\n\n
Data misuse for personal gain<\/h3>\n\n\n\n
This type of data misuse involves someone exploiting sensitive data for their own benefit, often at the expense of others. For example, an employee might access your organization\u2019s trade secrets or information about customers to start their own business or sell the data to your competitors. Such data misuse can result in financial losses, reputational damage, and the loss of competitive advantage for your organization.<\/p>\n\n\n\n
Data misuse due to carelessness<\/h3>\n\n\n\n
Negligence, carelessness, or lack of proper training can also lead to data misuse. This could involve sharing data with unauthorized individuals, accidentally exposing sensitive information, or downloading data to unprotected personal devices. Poor data protection practices, such as lack of encryption or improper cloud storage configuration, can also lead to data breaches.<\/p>\n\n\n\n
Data commingling<\/h3>\n\n\n\n
Commingling occurs when an organization uses personal data collected for a specific purpose and then reuses that data for another purpose, which in most cases violates the data subject\u2019s consent. An example of such misuse of personal information would be a company collecting data for academic research and then sharing this data with a partner for marketing purposes. Misuse of personal data can lead to regulatory fines and lawsuits.<\/p>\n\n\n\n
Data misuse can often go undetected for extended periods, yet its consequences can be damaging to your organization. In the following section, we analyze four real-world examples of data misuse and the negative impacts they had on organizations and the people associated with them.<\/p>\n\n\n\n
4 major real-world examples of data misuse<\/h2>\n\n\n\n
Case #1: Northern Ireland police personal information leak<\/h3>\n\n\n\n\t\t
\n\t\t\t\n\t\t\t\n\n\t\t\n\t\t\t\n\n\t\t\t\n\n\t\t\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nAffected entity<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nThe Police Service of Northern Ireland (PSNI)<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\n\t\t\t\n\n\t\t\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nIncident type<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nAccidental data leak<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\n\t\t\t\n\n\t\t\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nConsequences<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\n- \n
- The personal information of around 10,000 people leaked<\/li>\n\n\n\n
- Terrorism threat levels raised<\/li>\n\n\n\n
- Reputational damage<\/li>\n\n\n\n
- Potential lawsuits and fines<\/li>\n<\/ul>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\t\t\t \n\t\t<\/div>\n\t\n\n\n
In August 2023, the Police Service of Northern Ireland (PSNI) suffered a major data breach<\/a> when the sensitive personal information of its workforce was accidentally published online. The breach occurred due to an employee\u2019s mistake in responding to a Freedom of Information (FOI) request. The leaked information contained the surnames, initials, ranks, roles, and workplace locations of about 10,000 PSNI officers and civilian staff.<\/p>\n\n\n\n
In the wake of the event, some personnel found themselves having to relocate as they found themselves fearing for the safety and lives of their families and themselves. The breach also caused reputational damage to the PSNI and could result in financial penalties \u2014 the Information Commissioner has indicated a potential fine of up to \u00a3750,000<\/a> ($971,000) for the organization.<\/p>\n\n\n\n
Case #2: Data exfiltration by Pentagon insider<\/h3>\n\n\n\n\t\t
\n\t\t\t\n\t\t\t\n\n\t\t\n\t\t\t\n\n\t\t\t\n\n\t\t\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nAffected entity<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nThe United States Department of Defense<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\n\t\t\t\n\n\t\t\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nIncident type<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nData exfiltration by an insider<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\n\t\t\t\n\n\t\t\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nConsequences<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\n- \n
- Classified military data leaked<\/li>\n\n\n\n
- National security threats<\/li>\n\n\n\n
- Risk of losing advantages over military adversaries<\/li>\n<\/ul>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\t\t\t \n\t\t<\/div>\n\t\n\n\n
In April 2023, the FBI arrested 21-year-old Jack Teixeira, who was a member of the Massachusetts Air National Guard at the time. In this case of data misuse, Teixeira leaked highly classified military documents<\/a> online. The suspect held a top-secret security clearance and had been systematically stealing and sharing these sensitive files for over a year.<\/p>\n\n\n\n
The top-secret information that Teixera leaked included data about the state of the war in Ukraine, Israel’s Mossad intelligence agency, and China’s interests in Nicaragua. The leak is considered one of the most significant breaches of US national security in recent years, potentially compromising relationships with allies and exposing sensitive military operations. Teixeira faces up to 25 years in prison for unauthorized removal and retention of classified documents.<\/p>\n\n\n\n
Case #3: Reddit phishing attack<\/h3>\n\n\n\n\t\t
\n\t\t\t\n\t\t\t\n\n\t\t\n\t\t\t\n\n\t\t\t\n\n\t\t\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nAffected entity<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nReddit<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\n\t\t\t\n\n\t\t\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nIncident type<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nPhishing attack<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\n\t\t\t\n\n\t\t\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nConsequences<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\n- \n
- Personal data and intellectual property leaked<\/li>\n\n\n\n
- Reputational damage<\/li>\n\n\n\n
- Potential fines issued by data privacy regulators<\/li>\n<\/ul>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\t\t\t \n\t\t<\/div>\n\t\n\n\n
In February 2023, Reddit became aware of a data breach<\/a> that involved one of their employees. According to Reddit, cyberattackers send a copy of an internal website page to trick the employee into providing them with credentials and a second-factor token. By receiving access to the employee\u2019s account, \u201cthe attacker gained access to some internal docs, code, as well as some internal dashboards and business systems.\u201d The data leak also affected the information of company contacts and employees as well as some advertiser information.<\/p>\n\n\n\n
This incident is an example of poor cybersecurity training for employees, which made the phishing attack successful. Although Reddit\u2019s security team quickly removed the perpetrator\u2019s access, there\u2019s no clear way to tell if the attackers managed to use the leaked data. This data breach could have impacted the company\u2019s reputation and caused issues with data privacy regulations.<\/p>\n\n\n\n
Case #4: Credit Suisse insider attack<\/h3>\n\n\n\n\t\t
\n\t\t\t\n\t\t\t\n\n\t\t\n\t\t\t\n\n\t\t\t\n\n\t\t\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nAffected entity<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nCredit Suisse<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\n\t\t\t\n\n\t\t\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nIncident type<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nInsider attack by an employee<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\n\t\t\t\n\n\t\t\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nConsequences<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\n- \n
- Sensitive information on more than 18,000 accounts leaked<\/li>\n\n\n\n
- Reputational damage<\/li>\n\n\n\n
- 3% share loss<\/li>\n<\/ul>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\t\t\t \n\t\t<\/div>\n\t\n\n\n
In February 2022, Credit Suisse suffered an insider attack<\/a> carried out by an employee whistleblower. The employee leaked sensitive data of the bank\u2019s customers to a German newspaper.<\/p>\n\n\n\n
As a result, information on more than 18,000 accounts (which contained more than $100 billion) was revealed to the S\u00fcddeutsche Zeitung newspaper, and afterward to a wide number of other global media and organizations. Journalists quickly spread the information, as it contained data on \u201cdirty billings\u201d belonging to some people under sanctions. Shares of Credit Suisse lost around 3% after the incident.<\/p>\n\n\n\n\t\t
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t <\/div>\n\n\t \n\n\t \n\n\t \n\t \t\t\t<\/div>\n\t \t\t<\/div>\n\t \t<\/div>\n\t <\/div>\n\t\n\t\t\t\n\nLearn more about<\/p>\n\n\n\n
Insider Threat Management with Syteca<\/a><\/p>\n\n\n\t\t\t \n\t\t<\/div>\n\t\n\n\n
4 steps to detect and prevent data misuse in your company<\/h2>\n\n\n\n
Ensuring the security of your data at rest and in transit is essential, so here are four key measures you can implement to significantly reduce the risk of data misuse in your organization:<\/p>\n\n\n\n
![\"Image](\"https:\/\/syteca_site_uploads.storage.googleapis.com\/wp-content\/uploads\/2022\/05\/29055742\/figure-1-4-ways-detect-and-prevent-misuse-data.svg\")
<\/figure>\n\n\n\n1. Manage data access<\/h3>\n\n\n\n
Data access is the entry point for potential misuse. Employees and subcontractors could get unauthorized access to confidential or sensitive data in various ways:<\/p>\n\n\n\n
- \n
- An admin may accidentally provide access<\/li>\n\n\n\n
- An employee can use their legal access<\/li>\n\n\n\n
- A malicious insider can use a shared account or a coworker\u2019s password<\/li>\n<\/ul>\n\n\n\n
Data can be misused when proper access management is not in place. Here\u2019s how you can manage data access in your organization:<\/p>\n\n\n\n
![\"Image](\"https:\/\/syteca_site_uploads.storage.googleapis.com\/wp-content\/uploads\/2022\/05\/29055752\/figure-2-4-ways-detect-and-prevent-misuse-data.svg\")
<\/figure>\n\n\n\n- \n
- Deploy secondary authentication<\/strong><\/li>\n<\/ul>\n\n\n\n
It\u2019s important to identify each user to know who is trying to log in to the system. This becomes complicated when employees use shared accounts, such as admin<\/em> and root<\/em>. Therefore, it\u2019s important to use secondary authentication if you use shared accounts.<\/p>\n\n\n\n
- \n
- Deploy two-factor authentication (2FA)<\/strong><\/li>\n<\/ul>\n\n\n\n
Credential theft remains one of the most popular ways to breach an account. Two-factor authentication<\/a> allows you to conclusively verify a user\u2019s identity, as it requires the user to provide an additional authentication factor to successfully log in to the system.<\/p>\n\n\n\n
- \n
- Assign access attributes or user roles to each user account<\/strong><\/li>\n<\/ul>\n\n\n\n
Once a user\u2019s identity is verified, you want to granularly manage their access<\/strong>. To do that, assign user roles or access attributes<\/a> to each user account. Access management is especially important for privileged users<\/strong>, as their elevated rights pose significant risks if compromised.<\/p>\n\n\n\n
2. Monitor user actions<\/h3>\n\n\n\n
One of the best ways to detect and prevent data misuse is to provide visibility into what happens when data is accessed. A dedicated user monitoring solution<\/a> allows you to easily see what happens to data: when it is used, how, and by whom.<\/p>\n\n\n\n
This method of insider threat mitigation includes:<\/p>\n\n\n\n
- \n
- \u0421ollecting user<\/strong> activity logs<\/strong><\/li>\n<\/ul>\n\n\n\n
- Assign access attributes or user roles to each user account<\/strong><\/li>\n<\/ul>\n\n\n\n
- Deploy two-factor authentication (2FA)<\/strong><\/li>\n<\/ul>\n\n\n\n
- Deploy secondary authentication<\/strong><\/li>\n<\/ul>\n\n\n\n