Insider Threat Behavior Factors: A comparison of theory with reported incidents

Insider Threat Behavior Factors:A comparison of theory with reported incidents

Asmaa Munshi, Peter Dell and Helen Armstrong 2012 45th Hawaii International Conference on System Sciences

Summary

This paper Identifies the factors for insiders behavior Provides a comparison of academic

research with empirical evidence from reported incidents

Recommends future research directions

Appreciative Comments

The paper identified the need for a holistic approach to encapsulate a broader perspective of the insiders behavior.

The research conducted is beneficial for security professionals for protection of organizational data.

Appreciative Comments The paper proposed directions for further

research

Gender and Remote Access as factors totally overlooked by Literature.

Psychological Factors needs Literature based research Outsourcing and Cultural Factor needs Evidence Based

Research

Critical Comment

Cultural Factor

“According to Royds most of the data losses reported by the government of the UK since the HRMC incident show that only 5% occur because of technology issues while 95% occur as a result of cultural factors”

“Empirical evidence from reported incidents reviewed in this study has found no evidence to support the assertions”

HMRC [UK Government’s Revenues and Customs Department]

Question For Discussion

Let suppose you observe some suspicious activity at your workplace.

What would be your reaction?

Insider Threat Behavior Factors: A comparison of theory with reported incidents

Documents

Transcript of Insider Threat Behavior Factors: A comparison of theory with reported incidents

Real-world Cases of Insider Threat: Combating Malicious IT ... · The CERT Insider Threat Center The CERT Insider Threat Center is a Center of Insider Threat Expertise at the Software

Insider Threat Detection Recommendations

Insider Threats - University of Pittsburgh · Unintentional Insider Threat Definition • An unintentional insider threat is (1) a currentAn unintentional insider threat is (1) a

2015 VORMETRIC INSIDER THREAT REPORT · INSIDER THREAT REPORT Trends and Future Directions in Data Security Sponsoring Partners . 2015 Vormetric Insider Threat Report HealthcareRetail

Developing Your Insider Threat Program: Insider Threat Best Practices

Insider Threat Summit - The Future of Insider Threat Detection

Cyber, Physical or Insider Threat? - ASIS Europe 2018 · Cyber, Physical or Insider Threat? ... navigating a complex risk landscape? physical threat cyber threat insider threat ...

Network Security, Incident Management, and Insider … · Network Security, Incident Management, and Insider Threats ... 2. Insider Threat Agenda. ... Insider Threat Issue.

Managing insider threat

Mitigating Your Biggest Security Challenge: Your Insider Threat · 2015-06-23 · According to Verizon Data Breach Report 2013, 69% of reported security incidents involved an insider.

Insider threat kill chain

The Insider Threat: Lessons Learned from Actual Insider … · The Insider Threat: Lessons Learned from Actual Insider Attacks Randall Trzeciak Insider Threat Center at CERT ... Public

CYBERSECURITY - SIFMA€¦ · the insider threat at financial institutions; and (3) to help financial firms measure their insider threat program’s effectiveness. The Insider Threat

ADVISORY: Insider Threat Competency Resource Guide · 2017-08-30 · UNCLASSIFIED Insider Threat CRG 4 UNCLASSIFIED 4. Execute insider threat awareness training requirements: Insider

Insider Threat 2 v1

Insider Threat

Insider Threat Mitigation

Privacy Impact Assessment for Insider Threat Reporting ......Insider Threat Reporting Mobile Platform Page 3 either mitigate the potential insider threat concern, or obtain articulable

INSIDER THREAT DEFENSE Threat Defense-Insider... · INSIDER THREAT DEFENSE Security Behind The Firewall Is Our Business Table of Contents Page The Insider Threat - How Vulnerable

You've caught an Insider Threat, now what? The Human Side of Insider Threat Investigations