Privacy Commissioner Report – Guidance For Managing Insider Threats

Employees and other insiders are a significant risk to the security of personal information and other data. A substantial portion of cybersecurity incidents is caused or facilitated by the affected organization's insiders, whether acting inadvertently or intentionally. The Privacy Commissioner of Canada recently issued a report that provides guidance for managing insider threats.

Insider threats

Studies consistently indicate that a substantial portion of cybersecurity incidents and data breaches is caused or facilitated by a current or former insider (e.g., a director, executive/manager, employee or contract worker) of the affected organization or its business partners. For example, the 2020 Ponemon Cost of Insider Threats Global Report concludes that the frequency and cost of insider threats have increased dramatically over the course of two years.