Managing Insider Risk – Recent Best Practices Guidance

Employees and other insiders are a major security risk. A significant portion of cybersecurity incidents are caused or facilitated by the affected organization's insiders, whether acting inadvertently or intentionally. Organizations should assess their insider risk management program for compliance with recent best practices guidance, and ensure that their insider risk management program complies with applicable law.

Insider Risk

Studies consistently indicate that a significant portion of cybersecurity incidents and data breaches are caused or facilitated by a current or former insider (e.g. a director, executive/manager, employee or contract worker) of the affected organization or its business partners. The Verizon Insider Threat Report concludes that 20 percent of all cybersecurity incidents and nearly 15 percent of all data breaches in the Verizon 2018 Data Breach Investigations Report resulted from "insider and privilege misuse" by individuals within the