Sometimes the biggest threat to your sensitive data is not malware or an external bad actor, but one of your own employees. Sales Engineers Lucas Chumley and Louis Smith will demonstrate how to minimize the risk posed by an insider threat. Part One of this demonstration will show how Fidelis technology can help identify and provide initial notification of a probable threat and then automate response, including changes to user privileges and monitoring capabilities to prevent lateral movement of data internally.

1. Identifying Insider Threats
with Fidelis EDR Technology
Louis Smith Jr – Director, Sales Engineering
Lucas J. Chumley – Sr. Sales Engineer

2. © Fidelis Cybersecurity
An insider threat is generally defined as a current or former employee,
contractor, or other business partner who has or had authorized access to
an organization's network, system, or data and intentionally misused that
access to negatively affect the confidentiality, integrity, or availability of the
organization's information or information systems.
United States Department of Homeland Security
2
Defining an Insider Threat

3. © Fidelis Cybersecurity3
Accidental
No warning
Cannot be prevented
No fault
Negligent
Foreseeable
Preventable
Not intentional
At fault
Malicious
Intentional
Usually targeted
Categories of Insider Threat
Leaks & Spills
Espionage,
Sabotage, and
Targeted Violence

4. © Fidelis Cybersecurity
Insider Threat is the responsibility of the entire organization, not
just the information security team.
4
Cross-functional responsibility

5. © Fidelis Cybersecurity5
RESIGNATION
• Intellectual Property
• Sabotage
• Resignation
RESIGNATION
DISCONTENT
• Voices grievances with the
company at inappropriate
times or to inappropriate
audiences
• Displays combative behavior
with coworkers
• Resistant to change
IGNORANCE
• Never taught personal
responsibility over company
data.
• Susceptible to Phishing &
other like attacks.
• Little knowledge of security
practice.
IGNORANCE
PERSONAL LIFE
• Financial Motivation:
• Blackmail &/or Bribery
• Working off hours
• Frequent Absence from work
PERSONAL LIFE
Indicators of Elevated Risk

6. © Fidelis Cybersecurity
The Struggle is Real …
6
The stats vary but the message is clear
• Careless or uninformed staff have
contributed to 46% of the number of
breaches last year..
• Almost 58% of organizations that had
security incidents over 2017 blamed
them on insiders.
https://blog.netwrix.com/2018/01/23/cloud-security-risks-and-concerns-in-2018/
https://go.kaspersky.com/Human-Factor-LP.html
https://www.fidelissecurity.com/threatgeek/insider-threats-overview
The ramifications can be huge in terms of:
• Cost
• Compliance
• Operations
• Intellectual Property
• Brand Reputation
Punjab National Bank lost
$1.6 Billion in fraudulent
transactions
Coca Cola lost 8000
employee records
Tesla Insider Threat
sabotaged operations
Tesla also had
sensitive IP
exported from the
same threat
Google had 14,000 technical
files downloaded by an
employee who then took
them to Otto, a company
acquired by Uber

7. © Fidelis Cybersecurity
Assessing your Insider Threat Preparedness
7
Policy
Awareness and Training
Culture
Technology

8. Using Fidelis Elevate to Mitigate and Detect Insider
Threat
Live Demonstration

9. © Fidelis Cybersecurity
Q & A
Don’t forget to register for Part II of this
webinar as we’ll be explaining how Fidelis
technology can be used to help
organizations respond to insider threats
and prevent data exfiltration.
Check the link in your chat