The CERT® Guide to Insider Threats: How to Prevent, Detect, and Respond to Information Technology Crimes (Theft, Sabotage, Fraud)

Chapter 9. Conclusion and Miscellaneous Issues

This chapter wraps up the book by covering two miscellaneous issues that we mentioned briefly but did not cover in detail earlier: insider threats from trusted business partners, and malicious insiders with ties to the Internet underground. We conclude with a final summary, which could serve as a handy reference should you need a “cheat sheet” for future discussions on insider threat.

Insider Threat from Trusted Business Partners

Trusted business partner (TBP): any external organization or individual an organization has contracted to perform a service for the organization. The nature of this service requires the organization to provide the TBP authorized access to proprietary data, critical files, ...