An insider threat is someone within the organization, someone that works there prior, partners, or
anyone with inside information pertaining to the organization (Wright, 2017). A threat from the
inside of an organization is often the hardest to see. It is also one of the kinds of threats that can
do the most damage to an organization. This is because of the kinds of accesses someone within
an organization has compared to outsiders. There can be two kinds of damage an insider can do,
they are intentional and unintentional (Stone, 2021). The unintentional risk is one often
overlooked because the first instinct is to think people are only doing things intentionally.
Having a risk management plan focusing on the ways to mitigate insider threats is beneficial.
When it is the kind of company where employees could do physical damage to production
looking at that kind of threat from all sides is essential to have (Björkman et al., 2022). One
other kind of insider threat is when someone misuses their privilege (Reveraert & Sauer, 2020).
This cannot be overlooked as a threat. If working on a project this should always be
acknowledged as a risk. It is not specific to a particular project but is always a threat to keep in
mind.
References
Björkman, K., Holmberg, J.-E., & Mätäsniemi, T. (2022). Comparing physical protection
strategies against insider threats using Probabilistic Risk Assessment.5Nuclear Engineering
and Design,5391, 111738. https://doi.org/10.1016/j.nucengdes.2022.1117385
Reveraert, M., & Sauer, T. (2020). Redefining insider threats: A distinction between insider
hazards and insider threats.5Security Journal,534(4), 755–775.
https://doi.org/10.1057/s41284-020-00259-x5
Stone, A. G. (2021). The role risk-management plays in reducing insider threat’s in the federal
government.5Information Security Journal: A Global Perspective,531(3), 338–345.
https://doi.org/10.1080/19393555.2021.19987355
Wright, L. (2017).5People, risk, and security: How to prevent your greatest asset from becoming
your greatest liability. Palgrave Macmillan.5
Response 1
Brianna Perry
Brianna, I enjoyed reading your thoughts on leaders and how they need to plan for and
understand technology advancements for their respective organizations. One thing I think is that
leadership needs to keep an open mind to the possibilities that could be with new technologies.
But those small companies don't have the luxury of taking on the latest and greatest technology. I
think that rings true for cybersecurity risks as well. They will more than likely not be a priority
for them. They are going to want to stay competitive and invest in what will get them ahead with
their consumers. As we have learned in this class, we have to do a thorough risk assessment, and
we cannot ignore cybersecurity risks just because an organization is small. Cybersecurity risk has
become a huge challenge that organizations are facing in the current climate (Perols & Murthy,
2020). This risk can take down any organization, big or small, if they are not prepared and done
a though risk assessment and established mitigation if it does occur. It makes me think of all the
small nonprofits that are choosing to help their clients over shoring up their cybersecurity. If that
day comes and they are the victim of cybersecurity, them choosing to help more clients in place
of investing in cybersecurity, they will be unable to help any. That scares me for those nonprofits
doing as much good in the world as they can.
Reference
Perols, R. R., & Murthy, U. S. (2020). The impact of cybersecurity risk management
examinations and cybersecurity incidents on investor perceptions and
decisions.5AUDITING: A Journal of Practice & Theory,540(1), 73–89.
https://doi.org/10.2308/ajpt-18-0105
IGNORE BELOW
Holy Bible new living translation. (2021). DaySpring; Candace Cameron Bure
(Acts 17:30, New Living Translation)
Merida, T., Platt, D., & Akin, D. L. (2015).5Exalting Jesus in 1 and 2 kings. B & H Publishing
Group.5
(Merida et al., 2015)
Hagen, B. W. (2018).5Problem, Risk, and Opportunity Enterprise Management. Probabilistic
Publishing.5
(Hagen, 2018)
Wright, L. (2017).5People, risk, and security: How to prevent your greatest asset from becoming
your greatest liability. Palgrave Macmillan.5
(Wright, 2017)
