Insider Threat Risk Management
Ross Johnson · 2020
This chapter discusses types of insiders, insider threat risk management programs, and online resources to obtain more information on these subjects. Employees pose a special problem. Insiders can do far more damage than an outsider can do. They are in the best position to damage your company: they’re already inside; they have access and authority; they know their way around; they can move about without attracting attention; and they get paid to do it by you. They form friendships and alliances within the company that may unwittingly abet or cover their activity. They can steal inventory or proprietary information, defraud you for money, and sell personal or customer information. They can pass sensitive security information on to outsiders for use in robberies or terrorist attacks, physically hurt or kill your employees, plant viruses behind your firewalls, and cause good employees to abandon your company. Sometimes, they don’t even realize they’re doing it.