Turning Your Security Strategy Inside Out—Managing Insider Threat
summary
Covers techniques for defending against insider threats and advanced attackers who impersonate insiders, focusing on creating an insider threat risk model using kill chain analysis. Describes a five-step program and strategic shifts needed to manage insider risk, with guidance aimed at building an effective insider threat strategy.
AI-written summary · about
chapters (19)
- 0:00Intro
- 0:29The Perfect Storm
- 3:06Bad and Getting Worse
- 10:31Non-Malicious Insiders
- 19:08Insider Threat - More Difficult Than Others
- 24:16How Insiders are Handled (Unregulated Data)
- 25:54Insider Threat - Program Solution
- 26:36Phase 1 - Establishing Insider Threat Program
- 29:03Know Your Enemy
- 29:30Insider Threat Modeling (1)
- 32:06Calculating the Insider Risk (1)
- 33:01Insider Threat Focus Areas
- 35:47Phase II - Reactive Controls & Processes
- 37:10Phase III - Operational Controls
- 38:32What is Normal?
- 39:07Phase IV - Purposeful Operations
- 40:39Phase V-Strategic Business Focus
- 42:01Insider Investigations
- 42:43Insider Threat - Best in Class
related talks
48mStop Chasing Insider Threats, Start Managing Insider Risk
15mPredictive Techniques to Catch Insider Threats Before they Become Criminals
20mIntriguing Insider Threat Cases - Make Sure This Doesn't Happen to You!
21mBusiness Defence -- Managing the Insider Threat with Security Analytics
55mDeveloping a Conceptual Model for Insider Threat
54mInsider Threats and New Economy Industries
46mInside Payback: Using Metrics to Demonstrate Insider Risk Program Value
15mSecret Tips to Reduce Insider Threat Risks with Behavioral AI