Section 27.257 Security Awareness: & Recognising Insider Threats

Question 1

Security Awareness

Answer 1

Knowledge and understanding of security threats and mitigation measures

■ Goal: Equip individuals to recognise and respond to threats for data protection

■ Focus: Common threats, potential risks, best practices for secure digital interactions

Question 2

Recognising Insider Threats

Insider Threats

Answer 2

Involve risks posed by individuals within an organisation

■ Threats can be intentional or unintentional, arising from various personal factors

■ Training employees to recognise anomalous behavior is essential in addressing
insider threats

Question 3

Behavior Indicators

Altered State or Substance Abuse

Answer 3

● Employees arriving at work intoxicated or hungover may indicate personal issues

● Impaired judgment may lead to unintentional data disclosure or misconduct

● Potential for coercion into making poor security decisions

Question 4

Behavior Indicators

Emotional Distress

Answer 4

● Signs of depression, giving away personal possessions, or emotional turmoil

● Emotional distress may lead to non-compliance with security protocols

● Vulnerability to exploitation by malicious parties

Question 5

Behavior Indicators

Lifestyle Incongruences

Answer 5

● Employees demonstrating a lifestyle inconsistent with their finances

● Investigate cases where an employee’s spending doesn’t align with income

● Discreet investigations to rule out illicit activities, theft, or information selling

Question 6

Behavior Indicators

Financial Struggles

Answer 6

● Employees under financial stress may express financial woes to coworkers

● Financial pressures can make individuals susceptible to bribery or data selling

● Organisations should have policies in place for handling such scenarios, like financial counseling or monitoring for unusual data access

Question 7

Building a Robust Insider Threat Program

Answer 7

■ Establish an insider threat program to create a security culture

■ Encourage employees to report suspicious activities

■ Provide training to recognise warning signs

■ Implement policies that support mental health and financial well-being

■ Ensure fair and confidential investigation processes

■ Employ user activity monitoring tools to detect anomalous behavior while respecting employee privacy