insider threat

Question 1

The three components needed for insider fraud to take place are:

Answer 1

motivation, opportunity and rationalization

Question 2

Name 3 ways to mitigate insider threats

Answer 2

Prevent
Detect
Respond

Question 3

Name 3 Motivations

Answer 3

Any 3 from:

Espionage
Sabotage
Theft of Intellectual Property
Financial gain
Revenge
Curiosity/Because they can
Vanity

Question 4

Name 3 ways to Prevent insider threats

Answer 4

Any 3 from:

• Only give users as much privilege as they need to do their job.
• Separate duties that can be dangerous together (e.g. transaction placing and clearing should never be done by the same person).
• Treat employees fairly.
• Educate employees about policies and consequences.

Question 5

Name 3 ways to Detect insider threats

Answer 5

• Log, monitor and audit employee activity.
• Pay special attention to privileged users.
• Allow anonymous reporting of issues.

Question 6

Name 2 ways to respond to insider threats

Answer 6

• Termination procedures are essential.

* Keep all logs to support investigation.