Awareness module on insider threats

Although “insider threat" is a commonplace term, it is a misnomer. “Insider risk" would more accurate since there is more to this than the threat posed by insiders. “Insiders" in this context are primarily employees - both staff and management - of the organization, those on its payroll. “Outsiders", then, are third-party employees (particularly those working for competitors or other adversaries) and unemployed people – a much larger group of course. In the government/military context, ‘foreigners’ (citizens of other nations and cultures, regardless of where they live) are generally considered outsiders too.Insiders present an insidious threat within the organization. Their access and extensive knowledge of the organization's operations presents opportunities to exploit vulnerabilities, compromise information assets, commit fraud and sabotage, or steal and disclose information. Learning objectives Introduce insider threats, providing general context and background informa...