Insider threat response and recovery strategies in financial services firms
Jacqueline Eggenschwiler, Ioannis Agrafiotis, Jason R. C. Nurse · Computer Fraud & Security · 2016
Over the past decade, the number and scale of attacks carried out by insiders has seen a steady increase.1 Financial services firms, in particular, have been frequent targets of insider attacks.2 Historically, the information security efforts of financial services firms have centred on defending external borders from intrusion by nefarious outsiders. More recently, however, security debates have broadened to include trusted employees, contractors and business partners.3 Financial services institutions have grown increasingly aware of the changing threat landscape and the debilitating effects of insider attacks on the confidentiality, integrity and availability of financial data and systems.4 Over the past decade, the number and scale of attacks carried out by insiders has seen a steady increase. Financial services firms, in particular, have been frequent targets of insider attacks. Financial services firms have mostly focused on defending against outsiders. Recently, however, debate has broadened to include trusted employees, contractors and business partners. Jacqueline Eggenschwiler, Ioannis Agrafiotis and Jason RC Nurse of the University of Oxford survey what we know about the threat management programmes employed by such firms.