SAFETY AND SECURITY

There are so many ways in which safety and security are the causes of people risks. We shall speak about cyber security in Chapter 16, whether internal or external threats, but most insider-generated events do not involve cyber. Usually it is about poor people risk management.

Most insiders see an opportunity to exploit their access, rather than seeking employment with the intention to committing an insider act. In a UK Centre for the Protection of National Infrastructure survey,10 the most frequent types of insider activity were unauthorised disclosure of sensitive information (47%). Financial gain (also 47%) was the main motive, as well as the desire for recognition. Interestingly, the vast majority were male, in the

Get Mastering Risk Management now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.