Stop Chasing Insider Threats, Start Managing Insider Risk
summary
Covers how organizations can evolve from insider threat programs to broader insider risk management by addressing scoping, engaging stakeholders, and defining measures of effectiveness. Uses case studies and lessons learned drawn from analysis of over 3,000 insider incidents and two decades of program development at Carnegie Mellon.
AI-written summary · about
chapters (7)
- 0:00Introduction and context
- 4:02Defining insider risk
- 10:00Operational resilience
- 17:02Holistic management program
- 23:08Threats and program elements
- 34:30Quantifying risk
- 38:46Questions and answers
related talks
46mTurning Your Security Strategy Inside Out—Managing Insider Threat
20mIntriguing Insider Threat Cases - Make Sure This Doesn't Happen to You!
15mPredictive Techniques to Catch Insider Threats Before they Become Criminals
46mA Framework to Effectively Develop Insider Threat Controls
46mInside Payback: Using Metrics to Demonstrate Insider Risk Program Value
21mBusiness Defence -- Managing the Insider Threat with Security Analytics
55mDeveloping a Conceptual Model for Insider Threat
54mInsider Threats and New Economy Industries