A Scenario-Based Approach to Mitigating the Insider Threat
Robert F. Mills, Michael R. Grimaila, Gilbert L. Peterson, Jonathan W. Butts · 2011
Abstract : This article presents a risk management strategy tailored specifically for the insider threat. Key components include the emphasis on people, process, and technology, organizational introspection into critical information resources, and a scenario-based approach to determining how insiders might attack those resources. Risks can then be mitigated through a variety of control mechanisms in a manner that does not introduce unnecessary costs.