2.4 - Insider Threats

Question 1

Insider threats

Answer 1

• More than just passwords on sticky notes
  – Some insiders are out for no good
• Sophistication may not be advanced, but the insider
  has institutional knowledge
  – Attacks can be directed at vulnerable systems
  – The insider knows what to hit
• Extensive resources
  – Eating away from the inside

Question 2

Recruiting insiders

Answer 2

• We’re getting better with protecting the network perimeter
  – It’s an ongoing race
• Ransomware actors are targeting insiders
  – Offering Bitcoin in exchange for access
  – One ransomware infection can earn millions
  for an attacker
• Keep aware
  – Maintain good security fundamentals
  – Always have backups