A field guide to insider threat helps manage the risk

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

SESSION ID:SESSION ID:
#RSAC
Tim Casey
A Field Guide to Insider Threat
Helps Manage the Risk
HUM-T10R
Senior Strategic Ris...

#RSAC
How do you think of insider threat?
2

#RSAC
The problem is becoming more complex
3
Logos and trademarks are the property of their respective owners

#RSAC
The Field Guide to Insider Threat
Accidental leak
Espionage
Financial fraud
Misuse
Oportun. data theft
Physical thef...

#RSAC
Characterizing Insider Threat

#RSAC
Definitions
Insider Threat is the potential for a
current or former employee, contractor,
or business partner to acc...

#RSAC
Insider Threat Agents
Non-Hostile
Reckless Insider
Outward
Sympathizer
Untrained/
Distracted Insider
Hostile/Non-Hos...

#RSAC
Attack Types
Accidental leak
Espionage
Financial fraud
Misuse
Opportunistic data theft
Physical theft
Product altera...

#RSAC
Attack Types
IP & Data Loss
Ooops
Ongoing, targeted
IP extraction
Exiting employees
Accidental leak
Espionage
Financ...

#RSAC
Threat-Consequence Vector Matrix
Analysis by Intel’s Threat Agent Analysis Group
Intent→ Non-Hostile
Non-Hostile
/Ho...

#RSAC
Applying the
Field Guide

#RSAC
Demonstrate the scope of the problem
Intent→ Non-Hostile
Non-Hostile
/Hostile
Hostile
Attack Type↓
Reckless
Employee...

#RSAC
Prioritizing Protection to Optimize Resources
• Accidental leak
• Espionage
• Financial fraud
• Misuse
• Opport. dat...

#RSAC
Prioritizing Protection to Optimize Resources
Intent→ Non-Hostile
Non-Hostile
/Hostile
Hostile
Attack Type↓
Reckless...

#RSAC
Intent→ Non-Hostile
Non-Hostile
/Hostile
Hostile
Attack Type↓
Reckless
Insider
Untrained/
Distracted
Insider
Outward...

#RSAC
Intent→ Non-Hostile
Non-Hostile
/Hostile
Hostile
Attack Type↓
Reckless
Insider
Untrained/
Distracted
Insider
Outward...

#RSAC
Customize for your threat landscape
The model is open-ended and you can
extend & tailor it to your environment
17

#RSAC
How the Guide Can Help You
Having a Field Guide helps you manage risk by:
Establishing a common framework and langua...

#RSAC
Applying the Field Guide in Your Organization
Short term
Share the Guide with key stakeholders to inform them of
the...

#RSAC
Resources
Intel Field Guide to Insider Threat: http://ow.ly/CLux308vUbP
Intel Threat Agent Analysis:
https://communi...

#RSAC
Questions?

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

2024 Trend Updates: What Really Wor... by Search Engine Jou... 1063109 views
Storytelling For The Web: Integrate... by Chiara Aliotta 981811 views
Artificial Intelligence, Data and C... by OECD Directorate ... 923520 views
How to Leverage AI to Boost Employe... by SocialHRCamp 392340 views
2024 State of Marketing Report – by... by Marius Sescu 221896 views
Everything You Need To Know About C... by Expeed Software 237729 views

View on Slideshare

1 of 21 Ad

View on Slideshare

1 of 21 Ad