ARTICLE · 18 OCTOBER 2024

Human Capital And Risk Governance: Insider Threats To Cybersecurity

WTW

Explore more from WTW

Often underestimated, insider cyber threats can be even more damaging than external ones.

United KingdomTechnology

As the connections between employees' actions and cyber threats become stronger, effective boards and C-suites are prioritizing their role in the integrated governance of human capital and cyber risk.

WTW's 2024 Global Directors and Officers Survey Report reveals cyberattacks and data loss as two of the top three risks globally. (The top risk is health and safety, which can impact employee judgment and actions). Numerous studies connect the role of human behavior (and error) in cyber threats. For example, analysis of the U.K.'s Department for Science Innovation and Technology latest annual report discusses the impact of phishing, email breaches and ransomware.

But what happens when cybersecurity risks come from deliberate action by company insiders?

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

Redrawing The Lines: FCA Consults On Cryptoasset Perimeter Guidance And DeFi Expectations

United KingdomTechnology

Freshfields Bruckhaus Deringer

Be Nice To Claude: Anthropic's Acceptable Use Policy Updates

United KingdomTechnology

Who Decides Which Systems Come Back First After An Attack?

United KingdomTechnology

Stop Comparing Legal Documents By Hand: Six New NdMAX Studio Apps

GlobalTechnology

New Position Statement On Judicial Use Of AI

United KingdomTechnology

Herbert Smith Freehills Kramer LLP

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Technology
- Cybersecurity

Related Comparative Guides

Comparative Guide

Artificial Intelligence

Comparative Guide

Blockchain & Crypto Assets

Comparative Guide

Fintech

See more popular content from

Technology

Be Nice To Claude: Anthropic's Acceptable Use Policy Updates

Anthropic's updated Acceptable Use Policy introduces significant changes for organisations building on Claude, extending far beyond the headline-grabbing prohibition on abusive behaviour towards the AI model. The policy now addresses deceptive campaigns, election interference, weapons development, surveillance systems, and requires human oversight for high-impact decisions affecting individuals' rights and wellbeing.

United KingdomTechnology

The Latest Scottish Tech Industry Survey Results At A Glance

Some key takeaways from the Scottish Tech Industry Survey 2025.

United KingdomTechnology

EU Digital Omnibus On AI Enters Into Force

The EU has introduced its first major amendment to the AI Act through the AI Omnibus regulation, which delays certain compliance deadlines while maintaining others. Organizations must understand which obligations remain on schedule, including transparency requirements and general-purpose AI provisions, and which have been deferred, such as high-risk AI system requirements.

European UnionTechnology

AI In Advertising: Do I Need To Label My AI-generated Ad?

Advertisers using AI-generated content face complex transparency requirements that vary significantly between the UK and EU. While UK law focuses on preventing consumer deception without explicit AI labelling mandates, the EU AI Act introduces strict disclosure obligations for 'deep fakes' that could catch even UK-based campaigns if they reach EU audiences.

European UnionTechnology

Browne Jacobson LLP

The EU AI Act’s Transparency Rules Are Now Live: What Organisations Need To Do

As of 2 August 2026, the EU AI Act’s transparency obligations under Article 50 are now in effect, with one limited exception for providers of AI systems generating synthetic audio, image, video or text content that...

United KingdomTechnology

Kingsley Napley LLP

The UK Cyber Security And Resilience Bill: What You Need To Know

The UK Government has introduced the Cyber Security and Resilience Bill to address critical gaps in existing cyber security regulations, expanding coverage to data centres, managed service providers, and critical suppliers while granting regulators enhanced enforcement powers. With tightened incident reporting deadlines, turnover-based penalties up to £17 million, and mandatory supply chain resilience measures, organisations across essential services sectors must assess their readiness for compliance

United KingdomTechnology

Browne Jacobson LLP

The EU’s New AI Transparency Rules: What You Need To Know

The European Commission has published its Code of Practice on marking and labelling AI-generated content, helping businesses to meet new transparency duties under the EU AI Act.

European UnionTechnology

DMH Stallard LLP

Cyber Security And Resilience Bill: What's The Latest And What Should Businesses Do Now?

The National Cyber Security Centre emphasizes five critical areas requiring director-level attention: risk management, strategy, people, incident planning and response, and assurance oversight. Organizations must establish robust governance frameworks to address evolving cyber threats and ensure comprehensive resilience across their operations.

United KingdomTechnology

Celsius vs Tether: Court Ruling Marks Key Moment In Cross-Border Crypto Litigation

A recent ruling from the U.S. Bankruptcy Court has paved the way for Celsius Network to continue its $4 billion lawsuit against stablecoin issuer Tether.

United KingdomTechnology

Spencer West LLP

‘One Engine, Configured A Thousand Different Ways’ – Is Claude For Legal The Next Big Shift In Legal Tech?

On 12 May, Anthropic launched Claude for Legal, marking a shift in the AI company’s positioning, from primarily powering legal AI products such as Harvey and Legora, towards potentially becoming a legal platform in its own right.

United KingdomTechnology