Trial lock

This Research is for Members Only

Not a member? Unlock a free sample of our research now!

Already a member?

Sign in now

Security icon

Reduce and Manage Your Organization’s Insider Threat Risk

Insider threats are not always malicious, but that doesn’t mean they won’t cause damage.

Unlock a Free Sample

View Storyboard

Solution Set Storyboard Thumbnail

Contributors

  • Eric Andresen, IT Security Manager, SSAB Americas
  • Jeff Tandy, Senior IT Security Specialist, General Dynamics Land Systems
  • Bob Turner, CISO, University of Wisconsin-Madison
  • 1 anonymous contributor, Network End Security Manager, Municipal Government

Your Challenge

  • The hard digital wall has crumbled. Organizations have focused on defending against external threats but equally need to protect against insider threats.
  • Poor visibility into your insider threats cannot continue as they can cause significant damage to your organization’s business, workflow, revenue, and reputation.

Our Advice

Critical Insight

  • You can’t just throw tools at a human problem. While organizations should monitor critical assets and groups with privileged access to defend against malicious behavior, good management and supervision can help detect and prevent attacks from happening in the first place.
  • Insider threats will persist without appropriate action and culture change. Training and consistent communication of best practices will mitigate vulnerabilities to accidental or negligent attacks.
  • Without a formal policy and procedure, monitoring for insider threats can only be ad hoc at best, or at worst miss essential information. Target your monitoring of critical assets and users with privileged access to cover all kinds of insider threats.

Impact and Result

  • Effective and efficient management of insider threats begins with a threat and risk assessment to establish which assets and which employees are associated with sensitive or critical data, as well as to determine the current maturity of your security posture.
  • This blueprint will walk through the steps of understanding what constitutes insider threat, your current security maturity, how to implement an insider threat program, and best practices for monitoring your organization.

Research & Tools

Start here – read the Executive Brief

Read our concise Executive Brief to find out why you should reduce and manage your organization’s insider threat risk, review Info-Tech’s methodology, and understand the ways we can support you in completing this project.

1. Appreciate what insider threats are and where they come from

Understand the risks and threats associated with insider threat. Consider the controls to minimize insider threat. Include insider threats as part of your threat and risk assessment.

2. Implement an insider threat program

Develop an insider threat program. Create a microsegmentation of assets and users. Customize an employee monitoring policy.

Guided Implementations

This guided implementation is a four call advisory process.

Guided Implementation #1 - Understand what insider threats are and where they come from

Call #1 - Establish a TRA.
Call #2 - Explore the elements of a mature insider threat program.

Guided Implementation #2 - Implement an insider threat program

Call #1 - Create a microsegmentation.
Call #2 - Develop an employee monitoring policy.