- [Instructor] The insider threat is one of the most
complicated challenges of cyber security today
and will continue to be for many years.
An insider is basically anyone that has access
or inside knowledge to your organization
and to your systems.
Now, we have seen so many attacks
that have started from the inside.
Sometimes by disgruntled employees,
other times by individuals that have been working
with outside criminals, and in some cases
even with nation state actors.
Sometimes it does not take a sophisticated attacker
to make a lot of damage.
Anyone can actually be paid just to put a thumb drive
or a pen drive on a computer, and then automatically
install malware to compromise that system
or any other systems in your organization.
I also want you to understand that the insider threat
goes beyond a malicious person.
In other words, there is also the unintentional insider.
Basically the unintentional insider is any current
or former employee, or a contractor, or a business partner
who has or had access to your systems,
basically authorized access right,
not in a malicious way, and then even through their acts,
even though there were not malicious,
or there were not of malicious intent, they can cause harm
or substantially increase the probability
of a future serious harm to the confidentiality,
to the integrity, or the availability of your systems.
Now, The Department of Homeland Security in the US
has put a significant number of resources
related to the insider threat as some videos and trainings,
not only for government agencies in the US,
but also for anybody that wants to create
an insider threat program, so a mitigation program.
They have insider threat mitigation guides.
They have guides of the HR, the human resources role
in preventing insider threats.
They have even a maturity model,
and ways that you can do benchmarks within your organization
to measure the maturity model of your cybersecurity program
whenever it comes to the insider threats.
So I strongly suggest for you to visit and learn
from the links that I'm highlighting in the screen.