Posted in Cyber ThreatsThreat Intelligence by Derek Smith on February 10, 2015

Last week’s blog discussed two of the four levels of insider threat. I wrote about pure insider threat and insider associate levels. This week, I will discuss the other two levels of insider threat – inside affiliate and outside affiliate – and go over how they differ. Remember, understanding these various levels can assist your organization in its efforts to implement the proper security controls within your organization.

To recap last week’s first two levels of insider threat, pure insider threat is an employee who has all the rights and access associated with being an employee and is the most dangerous level as they can cause the most damage based on their access. Also from last week’s blog is the insider associate level. These are individuals such as contractors, cleaning crew, or security guards who have limited authorized access to your organization’s facility or network, which gives them contact with important company information.

The last two levels of insider threat are inside affiliate and outside affiliate.

Inside Affiliate

An insider affiliate is a spouse, child, friend or client of an employee who uses an employee’s credentials to gain access. This can be as simple as a client coming to visit an employee and obtaining a badge that gives that person access to the facility. If the person goes to use the rest room and on the way wanders around looking at what is on people’s desks or computers, he/she could glean some sensitive information.

To prevent insider affiliate threats, the best measure is to implement policies and procedures that will control affiliate activities. Once these policies are in place, they should be explained to employees, and employees should be required to sign off that they understand them. Never assume that employees will always to the right thing. Improper behavior may not be intentional, but it can still be devastating.

Outside Affiliate

Outside affiliates are non-trusted outsiders who use open access, such as wireless service, to gain access to a company’s resources. If the company happens to have an unprotected access point, and the outside affiliate is sitting across the street at a coffee shop, he/she could connect to the company’s wireless connection. Although this may seem obvious, many companies still overlook this threat.

To protect against the outside affiliate threat, a company needs to ensure it has proper access controls in place for all types of access, including virtual and physical.

The key thing to remember when dealing with these four types of insider threat is that they have access and in most cases will exploit the weakest link that gives them the greatest chance of access to your sensitive information, while minimizing the chances of being caught. It is the company’s job to ensure proper controls are in place to minimize these threats.

Cole, E., and Ring, S. (2006). Insider threat, protecting the enterprise from sabotage, spying and theft. Rockland: Syngress.

 


Comments

Great article, i enjoyed reading it, it has all the information one needs,i need best research writing services for my next project please help me,thanks for the article,love it

Reply
06/26/2016 5:05am

I'd personally declare that will this is the a terrific article of an wonderful man or woman, i am just very happy to discover this specific.

Reply
06/28/2016 5:09pm

Pretty section of content. I just stumbled upon your website and in accession capital to assert that I acquire actually enjoyed account your blog posts. Anyway I will be subscribing to your feeds and even I achievement you access consistently quickly.

Reply
07/12/2016 4:55am

Decent Blog post, My group is a good believer on advertisment observations at online sites to help you allow web log people know they’ve applied a product favorable to help you the online world!

Reply
07/28/2016 1:07pm

It is appropriate time to make some plans for the future and it's time to be happy. I've read this post and if I could I desire to suggest you few interesting things or advice. Maybe you can write next articles referring to this article. I wish to read more things about it!

Reply
09/10/2016 12:57am

When i got onto your blog site though putting attention simply just a little bit submits. Pleasant strategy for future, I will be bookmarking at a time get ones finish springs up.

Reply
09/10/2016 2:25am

My partner and i only want to tell you that we merely have a look at your internet site and also My partner and i believe it is extremely intriguing and also useful..

Reply
09/17/2016 11:54pm

There are plenty of dissertation online websites from the internet reside pick up unsurprisingly known in the websites.

Reply
09/20/2016 1:50am

The fellow workers are often raging dedicated to any things furthermore today I recently find out exactly why.

Reply
09/20/2016 6:08am

Which looked on away from your site considering Having to do with throughout learned so much relating to could be content pieces.

Reply
10/03/2016 3:52am

I am looking for and I love to post a comment that "The content of your post is awesome" Great work!

Reply
10/29/2016 4:09am

Your site fantastic, superior quality succeed... Most probably various should realize others despite that they don't take time to advise you.

Reply

Great article which contains a detailed explanation about the different levels of cyber threats. It gives a good idea about the inside affiliate as well as the outside affiliate which are the last two levels of insider threat. This content will help a lot of companies for their safety operations.

Reply

Thanks for sharing information about cyber threats in detail. Your article is really impressive and meaningful.

Reply
01/05/2017 2:36am

Cyber security plays a vital role in today’s business environment. I have gone through this article of Derek Smith, an expert in cyber security and it gives me detailed information regarding cyber threats and security. Thanks to this article and waiting for more updates from it.

Reply
01/08/2017 10:28am

In the event that you have pronounced either sort of chapter 11 however had no home on hold at the season of documenting, then getting a home advance can be entirely extreme in light of the fact that your financial soundness is at its most minimal point.

Reply
02/20/2017 11:51pm

I am blogging frequently & I really appreciate your information. This great article has truly peaked my interest.

Reply
03/03/2017 12:53pm

I've perused this post and on the off chance that I might I be able to yearning to propose you few intriguing things or exhortation. Possibly you can compose next articles alluding to this article. I wish to peruse more things about it!

Reply

Thanks for the information and we love to write about these topics

Reply
08/24/2017 11:45pm

Nice post, thanks for sharing.

Reply
09/23/2017 7:46am

Beauti Queen amazing kolkata escorts agency alwyas ready for you at your doorstep. Beauti Queen provide you high profile independent girl in kolkata, escorts service in kolkata, kolkata escorts. If you are looking for the ultimate encounter in Kolkata then I am your sophisticated young Kolkata escorts that provides upscale companionship for making your night becomes true.

Reply

whoah this weblog is excellent i love studying your articles.

Reply
09/27/2017 3:38am

Welcome Guys| http://www.gurgaondivas.com/. We are providing Best Escort Service in Gurgaon with affordable rates, just call us for Hi profile Call Girls in Gurgaon . Contact us for Call Girl in Gurgaon. 9971089475

Reply
09/28/2017 4:31am

Welcome Guys| http://www.gurgaondivas.com/. We are providing Best Escort Service in Gurgaon with affordable rates, just call us for Hi profile Call Girls in Gurgaon . Contact us for Call Girl in Gurgaon. 9971089475

Reply
09/28/2017 11:19am

We are offering High Class educated & attractive call girls service in Connaught place. Contact me for booking any time anywhere in Connaught place our incall and outcall both facility available in Delhi NCR. High class independent escort girl in Connaught place, mature escort girl in Connaught place, russian call girl and Indian high profile house wife available 24x7.

Reply
09/29/2017 1:42am

Offering Gurgaon escorts High Profile & well educated,Models with attractive personality call girls service in Gurgaon. for booking call any where any time in Gurgoan City. Our sexy girls here with us at Escorts in Gurgaon often like to be reserved and are not dependent on anyone. Service is 24x7 available.

Reply
10/02/2017 7:08am

Jiya Roy is a high class luxury and premium independent escorts agency in Gurgaon offering sexy independent escort Girls, models and cheap rate call girls for incalls and outcalls and travel arrangements. Female companions available 24/7 for business events, tour guide and much more.

Reply
10/03/2017 7:12am

Gurgaonfemales.in offers highly educated model from Gurgaon and best Escorts service in Gurgaon through some of its sizzling Independent escorts in Gurgaon Call Girls who are available to customers 24*7.

Reply
10/09/2017 4:24am

Renu Das Kolkata Escorts Services has gorgeous females provides Independent Escorts Service in Kolkata call girls at 100% satisfaction with VIP models. Provided Kolkata escorts at our agency are professional in nature and are eager to serve you at your place.

Reply
12/09/2017 12:34am

Gurgaon Divas Escorts Services- Aruna roy offers female independent escort service in Gurgaon to fulfill all your sensual desires. amazing Gurgaon escorts services who is always ready for you at your doorstep. Gurgaon escorts girls always been provide only the finest escort from around Gurgaon.We offer personal touch, using our elite escorts service

Reply
12/09/2017 3:11am

Reply
12/09/2017 4:23am

k

Reply
12/25/2017 6:03am

Vacation is one of the most anticipated activities. Taking a break from tired daily routine by visiting the attractions offers its own fun.

Reply
12/27/2017 8:27pm

Mantap info permainan bolanya. semoga lancar.

Reply
12/27/2017 11:52pm

Ayo gabung cept daftar disini semuanya. Jangan ragu.

Reply
12/28/2017 5:58am

In addition to returning to fitness, massage therapy will take you into a comfortable atmosphere, helping to reduce mild depression or anxiety.

Reply
12/28/2017 10:39pm

Luar biasa info game casino online terpercaya di dunia.

Reply
12/30/2017 2:35pm

It is very important to fix a landing page, to make sure that search results in search engines is yours. Install a script to record the number of visits so that it can be analyzed for the needs of website development.

Reply
01/01/2018 11:34pm

Agen casino network terpercaya online sukses selalu.

Reply
01/02/2018 2:04am

Sukses game toto online terpercaya mantap keren.

Reply
01/02/2018 11:52pm

Permainan poker online terpercaya di Indonesia keren.

Reply
01/03/2018 5:56am

How you can build trust is a matter of discussion that you can lead up for solutions. You need to have a Reliable Website Domain.

Reply
01/03/2018 5:56pm

Info main SBOBET segera daftar bersama kami.

Reply
01/03/2018 9:03pm

SBOBET indonesia terpercaya handal Indonesia.

Reply
01/04/2018 12:33am

Situs judi online terpercaya mantap luar biasa.

Reply
01/05/2018 12:32am

Kemudahan menyampaikan pesan togel hari ini.

Reply
01/06/2018 5:01am

SEO Services Warranty. Services that are targeted can be sold to the first page of google and sales targets will increase and better.

Reply
01/07/2018 4:05am

Delhi-Divas amazing Delhi escorts who is always ready for you at your doorstep. Hurry up to avail the most seductive independent escorts in Delhi.

Reply
01/08/2018 1:45am

Mantap jiwa togel hk pw dari Hongkong game pools.

Reply
01/09/2018 12:40am

Info main capsa susun online hanya bersama kami.

Reply
01/09/2018 5:14am

SEO goal is to put your website on the top position, or at least the first page of search results based on certain keywords that are targeted.

Reply
01/09/2018 7:51am

Professional SEO Services. Everyone has its own way to optimize SEO on the website there is easy to index by search engines.

Reply

Of course we know seach engines like Google, Bing, and other friends are suber main visitor which is free.

Reply

Make money work for you in the next few years. Our SEO services are so affordable that you can achieve Return on Investment in using our services.

Reply
01/10/2018 11:58pm

Sukses luar biasa info agen terpercaya

Reply
01/11/2018 9:31am

We will give the best recommendation for you to optimize the position of website in search engine, promote and improve reputation is the search engine.

Reply
01/11/2018 12:26pm

If you want to get the best points in a seo you can consult us to provide the best solution about the models and methods we use in raising your business and future.

Reply
01/15/2018 1:23am

Situasi permainan poker online business terbaik saat ini.

Reply
01/15/2018 5:15am

It is time you need to give more attention to optimize your website so that it can compete with your competitors on Search Engines.

Reply
01/16/2018 7:01pm

Info permain SBO terpercaya terlengkap mantap terbaik.

Reply
01/17/2018 4:56am

Hello Guys I am Ankita Malik, we are offering very aphrodisiacs female independent Housewife, Russian Call Girls in all over escorts services in Gurgaon/Gurugram at all VIP places. For sex dating with high class accommodation facility also. 24x7 hours available with best service. So book me through on this website- http://www.ankitamalik.co.in/

Reply
01/24/2018 10:15pm

Hi i am Jenisha Pandey high profile independent collage girl in Gurgaon. we are provide escorts service in gurgaon, gurgaon escorts, escorts in Gurgaon if you are captivating for an independent escorts Call Girls visit www.jenishapandey.com for your naughty desire I am always available 24x7 for your all sexual desire.

Reply

Reply

Riya Chaudhary is an Independent Delhi Escort girl, who offers dazzling hot Delhi Escorts Service, incall or outcall services both to complete your dreams in real entertainment. We offers high class Independent Escorts in Delhi at Riya Chaudhary Delhi Escorts service agency for elite peoples in the city to avail ultimate satisfaction. you can spend your beautiful moments.

Reply



Leave a Reply

    Author

    I am an expert on cyber security and business leadership with doctoral level training.  I am also an author, speaker and trainer.

    Archives

    April 2015

    Categories

    All
    Cyber Security

    View my profile on LinkedIn