Question

Insider threats: three categories of insider behavior are; Malicious, Negligent and Accidental. What action might a company take to address the concerns in each of these three areas?

Answer 1

Organization takes different initiatives to prevent different types of the insider behaviors. Regarding the malicious behavior, the organization takes initiatives to implement security infrastructure with secure access and setting up the data integrity measures that can prevent any scope of data theft, misuse and sharing of the data with the competing firms. The second step, will be to take proactive steps such as putting up CC TV system, GPS to track movement and implement different checks at the higher level to prevent the scope of malicious behavior. Further, the counselling of the suspected employees, will also take place so that either employees change their behavior or leave the organization on mutual consent.
Regarding the negligent behavior, the organization takes step to develop standard procedure for each activity and deliver adequate training to the employees so that deviation from the standard procedure, will not take place. Besides, setting up reward & re-enforcement system to follow the standard procedure and prevent negligence while delivering the performance, will motivate the employees to perform as per the organization’s expectations. It will eliminate the occurrence of the negligent behavior.
Regarding the accidental behavior, the organization should give counselling and training to minimize the accidents as it only happens when standard procedure is not followed. Accidental behavior is the outcome of negligent behavior. Hence, accidental behavior can be minimized by proper behavioral and technical training. Besides, the employees are also trained to act in a particular way to minimize the damage due to accidental behavior.