Information Security Management Handbook, Volume 6, 6th Edition

Chapter 7

Insider Threat Defense

Sandy Bacik

It is a known fact that insider threats exist for all organizations. Essentially, this threat lies in the potential that a trusted staff member may betray their obligations and allegiances to the enterprise and conduct sabotage or espionage against them. Many enterprises use the 80–20 rule when looking at threats. In the past, most of the enterprise threats were external. In today’s environment, the 80–20 threat has changed to be more of an insider threat. An “insider” is anyone who is or who has been ...