Picture
Posted in Cyber ThreatsThreat Intelligence by Derek Smith on February 4, 2015
Understanding the various levels of insider threat can assist companies in their efforts to implement the proper security controls within the organization. There are four levels of insider threat, and they all depend upon the levels of access someone has to the information within your organization.

In this week’s blog on insider threat we will learn about two of these threat levels—pure insider threat and insider associate. In next week’s blog, we will learn about the two other levels—insider affiliate and outside affiliate.

Pure Insider Threat

The first level of insider threat is the pure insider, which is an employee who has all the rights and access associated with being an employee. This employee usually has keys or a badge that allow them into the organization and user IDs and passwords that allow them access to the company’s network. This is known as authorized ‘privileged’ access. The pure insider is the most dangerous type as they can cause the most damage to the organization based on their access.

There is an even more dangerous level of pure insider. This is the elevated pure insider. This person is considered ‘elevated’ because they have additional privileges to access the company’s systems. This category includes such people as system administrators, who have root, or administrator access, on the network. They have and maintain this additional access in order to do their jobs. The problem is that in many cases they are given too much access; more than they actually need to conduct their duties.

When trying to detect the pure insider threat, there are three things you can do:

1. One solution to the pure insider threat is the principle of least privilege, which means giving this employee, the pure insider, access to the least amount of information needed to do their job.

2. A second solution is to monitor employee behavior. Based on my years as an investigator of insider threat I can assure you that in almost every case there was some behavioral change that if noticed, could have tipped off this insider threat behavior. If a certain employee has been complaining about financial challenges and a few months later is driving a new Mercedes, you may want to pay closer attention. The person either inherited money, won the lottery, or could be selling your secrets.

3. The third, money, continues to build upon the example in solution 2. Many people who perpetrate insider threat crimes have financial problems. An average employee would not commit insider threat, but if you add in stress from financial issues and someone offers enough money, there is a chance that the person may be tempted.

Insider Associate

Insider associates are people such as contractors, the cleaning crew, or security guards who have limited authorized access to your facility or network. They are not company employees and don’t need full access to your network. While these folks do not have access to the company’s network, they often have limited access that will give them contact with important company information. Many of these people have access to your facility at night and could actually read – or worse – copy, sensitive information that employees often leave out on their desk or unlocked computers. Even if you left this information on your desk and then locked your doors, the security guards and cleaning crew often have a master key that will get them through most locked doors. Employees have to remember that there are other people who can gain access to their offices and therefore, sensitive information should always be secured.

In order to minimize damage that could be caused by an insider associate, companies need to increase user awareness and control access to information. Raising awareness will assist in changing behavior and controlling access will prevent the unauthorized from obtaining the data.

Read next week’s blog to find out about the other two categories of insider threat facing us today—insider affiliate and outside affiliate

Cole, E., and Ring, S. (2006). Insider threat, protecting the enterprise from sabotage, spying and theft. Rockland: Syngress.




 


Comments

Go green - and enjoy the convenience and security of Guardian's EZPay service. EZPay is a free service from Guardian Protection Services that allows you to ...

Reply
09/04/2016 12:12pm

This is of huge assisstance in maintaining effective security. I myself will be investigating further into insider threat and installing proper security systems to deal with it. I am obliged to you for sharing such useful information with us.

Reply

These types of Insider Threats aren’t about cyber intelligence alone but these can also happen to any kinds of office. Unauthorized information dissemination also happens in the field of architecture, engineering, banking, education, and so on. There can never be a solution to keep information inside the office. Even if you offer a good paying job to an employee, they will still get tempted to sell your information especially if the price is right. Besides, that’s an evil work to steal information of a competitive company for your own good. These things happen but companies can only take extra precaution up to a limited extent.

Reply
02/01/2017 11:59pm

Testomenix a good deal greater quick than creams that don't comprise cortisone. but this brief remedy comes at a cost. if you use steroids for an extended period of time Testomenix and cortisone is a steroid you open yourself up to plenty of aspect consequences none of them precise.

http://guidemesupplements.com/testomenix/

09/06/2016 10:49pm

Thanks a lot for such detailed and informative post about that categories!

Reply
09/24/2016 2:53am

Whether it is within the U.S.A or in the streets of Bangkok, whilst protection may be required, overt bodyguards or close protection teams may not suit the purpose of travel. Certain clientele desire low profile protection, not wanting the attention gained from having an overt team in close vicinity at all times. 

Reply
02/02/2017 10:11pm

Alpha Monster Advanced dietary supplements take this opportunity to target busy women and remind them to reflect on consideration on health once and for all.to gain sturdiness Alpha Monster Advanced a sweet existence and ill unfastened life one must be extra cautious in looking after one health.

http://www.strongtesterone.com/alpha-monster-advanced/

Reply
10/13/2016 2:57am

You love to bike around town, spokes shining and spinning in the sun. But when lost bike lock keys get between you and your wheels, you need a 24 hour locksmith with professional tools to help with bike lock removal services! , can do just that. We are a nationwide 24 hour locksmith company with local locksmiths available whenever and wherever you need us.

You pack the last item into your new storage unit, slap the new padlock on the door, and head on your merry way. When you return a month later with the moving van, however, you can’t find the padlock keys. Locked out of your storage unit? In a huge hurry? Don’t kick the padlock — just call Locksmith Plus, Inc. Our 24 hour locksmith professionals carry the proper tools and equipment to remove padlock and other storage security hardware so we can come to your storage lockout rescue ! As a 24 hour locksmith provider, we handle a full range of lock and key emergencies day and night.

Reply
12/16/2016 1:39am

Now I am a bit informed about these categories. It's a useful knowledge.

Reply
02/03/2017 10:45pm

Biogenic XR the drug viagra acts in guys through stimulating blood float to the penis which could result to erection and hardening. this effect is made viable handiest in guys Biogenic XR due to the fact the woman gender lacks the receptors.

http://guidemesupplements.com/biogenic-xr/

Reply
02/05/2017 1:27pm

This is the most ideal approach to purchase a property particularly in the event that you have a place with administration class. The banks and lodging money organizations are additionally being professionally overseen.

Reply
02/05/2017 11:20pm

Alpha Monster Advanced this allows in retaining the body's metabolism. any other crucial element that you want to look into is your food schedule. you must plan Alpha Monster Advanced and keep on with a selected schedule. this need to be a part of your muscle constructing approach.

http://t-rexmuscleadvice.com/alpha-monster-advanced/

Reply
02/06/2017 9:58pm

Alpha X Boost a metabolic waste product that is secreted inside the muscle tissues as you workout. elevated stages of lactic acid have nothing to do with muscle growth Alpha X Boost and can clearly sluggish down your profits rather than velocity them up.

http://www.strongtesterone.com/alpha-x-boost/

Reply
02/07/2017 10:23pm

Azienda Collagen Serum hair care products keratin complex does now not have sodium chloride this is answerable for dulling and stripping of hair. keratin complicated Azienda Collagen Serum locks the moisture and vitamins within the hair and maintains it brilliant.

http://www.healthsupreviews.com/azienda-collagen-serum/

Reply
02/08/2017 10:09pm

Alpha Monster Advanced aerobics are not only excellent for the coronary heart by means of increasing cardio-vascular patience. aerobics additionally help in increasing Alpha Monster Advanced lean muscular tissues even as simultaneously reducing excess body fat.

http://guidemesupplements.com/alpha-monster-advanced/

Reply

Alpha Monster Advanced will no longer keep food as fats.one may also have considered junking the crash eating regimen choice but that does not imply you ought to Alpha Monster Advanced forget about to observe what your is ingesting. variety must constantly be considered.

http://rockhardfacts.com/alpha-monster-advanced/

Reply
02/12/2017 11:17pm

Alpha X Boost which can provide your body a few more assist chromium and vanadium are awesome for selling healthful metabolism. in case you are insulin Alpha X Boost resistant or will be on the verge of developing diabetes then those types.

http://guidemesupplements.com/alpha-x-boost-scam/

Reply
02/13/2017 9:48pm

Alpha X Boost the spare fat hiding our abdominal muscles. now the way to manage the imaginative and prescient of your very personal six-p.c maximum of having a Alpha X Boost six-percent has to do with food regimen. whilst you are on the gymnasium.

http://t-rexmuscleadvice.com/alpha-x-boost/

Reply
02/17/2017 1:25am

Testo Muscle Fuel manufactured by way of the nature and are simply unprocessed by means of the chemical compounds and technological know-how those Testo Muscle Fuel natural skin care products are derived from nature which includes fruits minerals and vitamins.

http://guidemesupplements.com/testo-muscle-fuel/

Reply
02/17/2017 9:23pm

Testo Ultra that makes you sense uncomfortable or that you are involved approximately. whether or not you are having an abdominal liposuction facial liposuction or neck liposuction, Testo Ultra or some other form of male liposuction.

http://t-rexmuscleadvice.com/testo-ultra-testosterone-enhancing/

Reply
02/19/2017 8:57pm

Pure Nitro Max people are more and more becoming health aware in recent times. an increasing number of people need to construct muscle speedy for this very reason. Pure Nitro Max almost each bodybuilding aspirant and athlete seems to be in a hurry.

http://www.healthsupreviews.com/pure-nitro-max/

Reply
02/20/2017 8:55pm

Alpha X Boost those hormones for the reason that dead lift makes use of so many muscle groups it is critical to prepare your exercises in this kind of manner Alpha X Boost that you'll no longer overwork those muscular tissues. either running on those muscle groups.

http://www.healthsupreviews.com/alpha-x-boost/

Reply
02/21/2017 9:32pm

TestoUltra stamina are also crucial factors the perfect nutritional dietary supplements can offer a number of one-of-a-kind additives for male enhancement.TestoUltra the excellent of an erection is manifestly a primary aspect that is wished for $exual pleasure.

http://guidemesupplements.com/testoultra/

Reply
02/22/2017 9:23pm

Testo Ultra as increasing health ranges muscle milk's whole health enhancing capabilities makes muscle milk protein an super preference for every person.if because Testo Ultra of any reason your has been getting skinny and you are appalled.

http://www.healthsupreviews.com/testo-ultra/

Reply
02/23/2017 9:34pm

Kamasutra Male Enhancement like several surgical procedure there are dangers related to breast enhancement surgical treatment and this must be investigated.Kamasutra Male Enhancement it is probably an amazing idea to first ask any family individuals or pals who had had their breasts.

http://t-rexmuscleadvice.com/kamasutra-male-enhancement/

Reply
02/24/2017 9:32pm

Andronite Enhanced one of the low down of being a model is rejection. since the opposition is hard, rejections might be as fast as seconds. you could both be too Andronite Enhanced thin too buff too avian too white and too dark and the listing should cross on.

http://guidemesupplements.com/andronite-enhanced/

Reply
02/26/2017 9:25pm

Muscle X TST 1700 bodybuilders often are searching for to develop the abdominal muscle mass as this particular region creates a visibly appealing body. in hopes Muscle X TST 1700 of achieving the most dazzling abdominal appearance bodybuilders.

http://www.healthsupreviews.com/muscle-x-tst-1700/

Reply
02/27/2017 9:46pm

Andronite Enhanced as they might exert pressure on the breasts. this is one greater reason for no longer getting in for massive shaped breast implants. Andronite Enhanced even when getting in for corrective surgical procedures in a while in lifestyles it must be remembered.

http://t-rexmuscleadvice.com/andronite-enhanced/

Reply
05/10/2017 2:03am

Awesome work you have done here, I am very happy to read this nice post. You are a great writer and give us much information.

Reply



Leave a Reply

    Author

    I am an expert on cyber security and business leadership with doctoral level training.  I am also an author, speaker and trainer.

    Archives

    April 2015

    Categories

    All
    Cyber Security

    View my profile on LinkedIn