Consider a situation where you are responsible for managing and protecting data for a medium or large enterprise. One of your key system admins leaves your organization, and while a new employee takes over, you continue to be busy with your daily deluge of tasks, assignments, incidents and reports. One fine day, you get informed that your admins can no longer access your storage management interface. Your hosts continue to access storage. You consider it a case of lost or misplaced passwords, and assign someone to try and retrieve passwords from ex-employees or from flat excel sheets. Crucial days pass by, and one day, the iscsi authentication begins to fail and your iscsi hosts are unable to access the target datastores. Sometime later, you receive an email claiming that your organization has been hit by ransomware attack and you need to meet the attacker’s monetary demands before you can get access to your storage. You immediately begin closing down your network but to no avail. The attackers have changed the encryption keys as well, and moreover, you have lost access to your backup storage as well. Disaster!! This is a case where an organization underestimated “Insider’s Threat”.