Combating Insider Threat
Greg Smith · Coast Guard Journal of Safety & Security at Sea, Proceedings of the Marine Safety & Security Council · 2014
The threat of cyber crimes by insiders is difficult to detect and respond to, because insiders already have access to systems. Insiders can be current or former employees who have authorized access to an organization's system and can bypass existing security measures through legitimate means. In order to prevent and mitigate insider threat, it is necessary to make sure that policies are clearly documented and consistently enforced. Educating employees on insider threat as part of security training and knowing the system’s assets are also important. No system is immune to insider threat, and organizations must remain vigilant.