FAQ's

An insider is a person with authorised access to items that an organisation wishes to protect- information, people, and dangerous or valuable materials, facilities and equipment. They are employees, contractors, partners, interns or visitors at any level of an organisation.

An insider risk, by definition, is the risk that an insider will use their authorised access to an organisation or their familiarity with internal controls to cause harm from the inside. These insiders may be self-motivated or manipulated to perform actions that breach security, but unintentional insiders can also inadvertently disrupt organisational operations by accident. 

Insider risk fall into the following categories: sabotage, espionage, unauthorised disclosures, workplace violence, fraud, insider trading and data theft.  To learn more about Insider threats, look at Signpost Six Academy 

At Signpost Six we approach insider risk management as the implementation and continuous effort of ensuring the well functioning of insider risk programmes across organisations. Such programmes aim to mitigate, detect and prevent insider risks in the workplace. An insider risk management programme focuses on different dimensions, but most importantly a thorough management approach means reassessing the insider threat environment, processes and countermeasures to reach desired maturity levels.

In recent years we have seen a stark increase in data theft as information has become increasingly valuable and vulnerable in a digitised world, and criminals are continually finding new ways to monetise confidential information, including personal data. With perimeter defences becoming more secure, external actors are increasingly leveraging insiders to accomplish their needs. These trends are likely to continue as the workplace becomes ever more networked and technologies like the Internet of Things and wearable technology emerge.

All this requires new steps for organisations as a whole. As a solution to preventing and detecting emerging challenges, Signpost Six helps organisations implement holistic insider risk management programs.

In today’s time, Insider Risk can jeopardise businesses. Research conducted by Gurucul and the Cybersecurity Insiders estimated that remediation costs are higher than USD 100,000 in fifty per cent of the insider attacks. According to the Ponemon institute, large organisations that experienced an insider attack spent USD 17.9 million on average to resolve them. Organisations with a headcount below 500 spent an average of USD 7.7 million after experiencing an insider attack. These loss amounts are mostly attributed to impaired competitive advantage that results in lost revenue and lower market valuation. Large organisations can survive the loss of intellectual property but for smaller firms, the loss can jeopardise their existence.

We have a range of experienced consultants that help clients succeed with tailored advice and management support. Whether it is advice on setting up an insider risk management programme, assessing the maturity of an existing programme, benchmarking your programme or discussing a sensitive situation in confidence – we stand ready to provide support.

Our insider risk management solutions help organisations improve their internal processes and become proactive. Are you interested in implementing an insider risk management programme within your organisation? We know how.