Human factors in information security: The insider threat - Who can you trust these days?

Information Security Technical Report

Volumn 14, Issue 4, 2009, Pages 186-196

  Colwill, Carl ^a  

^a BT Security ^*  (United Kingdom)

Author keywords

Human factors; Insider threat; Outsourcing; Security risk management

Indexed keywords

CULTURAL DIFFERENCE; CULTURAL FACTORS; FULL-TIME EMPLOYEES; HUMAN FACTORS; INFORMATION SECURITY; INSIDER ATTACK; INSIDER THREAT; KEY ISSUES; KNOW-HOW; MANAGEMENT REGIME; PROACTIVE MEASURES; PROTECTION BARRIER; RISK PROFILE; SECURITY COMMUNITY; SECURITY CONTROLS; SECURITY RISK ASSESSMENTS; SECURITY RISKS; SECURITY THREATS; SOCIAL FACTOR; THIRD PARTIES;

HUMAN ENGINEERING; OUTSOURCING; RISK ANALYSIS; RISK ASSESSMENT; RISK MANAGEMENT;

SECURITY OF DATA;

EID: 77956652072     PISSN: 13634127     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.istr.2010.04.004     Document Type: Article

References (33)

1. BBC Five British soldiers shot dead, 4/11/09 http://news.bbc.co.uk/1/hi/ 8341659.stm 2009
2. BBC Deadly shootings at US army base, 6/11/09 http://news.bbc.co.uk/1/hi/ 8345713.stm 2009
3. BERR Department for business Enterprise and regulatory Reform (BERR) information security breaches survey 2008 http://66.102.9.132/search?q=cache: LK4aPYKu4gcJ:www.berr.gov.uk/files/file45714.pdf+berr+2008+breaches&;cd= 2&hl=en&ct=clnk&gl=uk 2008
4. R. Blakey PwC auditors 'ignored' Satyam fraud for fees, The Times, 24/4/09 http://business.timesonline.co.uk/tol/business/industry-sectors/ technology/article6154910.ece 2009
5. I. Castle Beware the enemy within, secure computing Magazine, 5/1/09 http://www.scmagazineuk.com/Beware-the-enemy-within/article/123505/ 2009
6. E. Cole Addressing the insider threat with NetIQ security and Administration Solutions Dr. Eric Cole and NetIQ https://www.netiq.com/f/ mynetiq/login.asp?title= Addressing+the+Insider+Threat+with+NetIQ+Operational+Change+Control+Solutions&pagepath=%2Fsolutions%2Focc%2Fdefault%2Easp&formid=3048&redirect= %2Ff%2Fform%2Fwhitepaperrequest%2Easp%3Forigin%3Dwebsite%5Fcms%26ctsource%3Dweb site%5Fcms%26id%3D3048&ForcingHTTPS=1 January 2008
7. CPNI Centre for the protection of national infrastructure (CPNI) ongoing personnel security: a good practice Guide http://www.cpni.gov.uk/ October 2008
8. CPNI Insider attacks http://www.cpni.gov.uk/MethodsOfAttack/insider.aspx 2009
9. Cyber-Ark. Snooping about, CIR Magazine; August 2009.
10. EIU Economist intelligence Unit: Power to the people? Managing technology democracy in the workplace http://graphics.eiu.com/marketing/pdf/ Technology%20Democracy.pdf June 2009
11. K. Flinders Employees will choose their own computers in 2010, Computer Weekly, 18/1/10 http://www.computerweekly.com/Articles/2010/01/19/239999/ Employees-will-choose-their-own-computers-in-2010.htm 2010
12. FT Madoff Scandal, 12/12/09 http://www.ft.com/indepth/madoff-scandal 2009
13. FT Stanford Scandal, 18/12/09 http://www.ft.com/indepth/stanford-scandal 2009
14. I. Grant Insiders cause most IT security breaches, Computer Weekly, 26/8/09 http://www.computerweekly.com/Articles/2009/08/26/237455/insiders-cause- most-it-security-breaches-study-reveals.htm 2009
15. NIAC. HMG IA standard No. 1, technical risk assessment part 1 (Issue 3.2); October 2008.
16. Jones A, Colwill C. Dealing with the malicious insider. In: 9th Australian information and Warfare security Conference; December 2008.
17. J. Kavanagh Security special report: the internal threat, Computer Weekly, 25/4/06 http://www.computerweekly.com/Articles/2006/04/25/215621/ security-special-report-the-internal-threat.htm 2006
18. R. Marsden Should my employer be allowed to snoop on me online, The Independent, 18/11/09 http://www.independent.co.uk/life-style/gadgets-and-tech/ features/rhodri-marsden-should-my-employer-be-allowed-to-snoop-on-me-online- 1822277.html 2009
19. McAfee Virtual Criminology report http://resources.mcafee.com/content/ NAMcAfeeCriminologyReport December 2008
20. A. McCue Beware the insider security threat, CIO Jury, 17/4/08 http://www.silicon.com/management/cio-insights/2008/04/17/beware-the-insider- security-threat-39188671/ 2008
21. N. Miller Balancing risk and reward in staff web usage policies, Computer Weekly, 19/1/10 http://www.computerweekly.com/it-management/risk-management/ 2010
22. A. Mohamed CW security trends for 2009, computer Weekly, 20/1/09 http://www.computerweekly.com/Articles/2009/01/20/234316/security-trends-for- 2009.htm 2009
23. P. Muncaster Security experts warn of insider threat timebomb, Enterprise Security Technology, 24/6/09 http://www.v3.co.uk/v3/news/2244699/experts-renew- insider-threat 2009
24. National Infrastructure Advisory Council (NIAC) Final report and Recommendations: the insider threat to national infrastructures, 8/4/08 http://www.dhs.gov/xlibrary/assets/niac/niac-insider-threat-to-critical- infrastructures-study.pdf 2008
25. Oliver Wyman Congruence model: a roadmap for understanding organisational performance http://www.oliverwyman.com/fr/pdf-files/Congruence-Model-INS.pdf 2008
26. Ponemon Institute. Addressing the insider threat, community Banker, 1/8/07; 2007.
27. D. Raywood Companies being hit by moles who are employed by gangs to steal data Secure Computing Magazine 2008 2/10/08
28. J. Royds Virtual battlefield CIR Magazine August 2009
29. Sasse MA, Ashenden D, Lawrence D, Coles-Kemp L, Fléchais I, Kearney P. Human vulnerabilities in security systems, human factors working group, Cyber security KTN human factors White paper; 2007.
30. Shaw E, Post J, Ruby K. Inside the mind of the insider, security management; 1999.
31. Thomson. HMRC data loss leaves 25 million exposed, ITN News, 22/11/07; 2007.
32. R. Thomson Bosses have their heads in the sand over new technology, Computer Weekly, 29/9/09 http://www.computerweekly.com/Articles/2009/09/29/ 237920/bosses-have-their-heads-in-the-sand-over-new-technology.htm 2009
33. E. Wilding Insiders are the biggest enemy Strategic Risk Magazine September 2007