Organizational vulnerability to insider threat: what do Australian experts say?

Organizational vulnerability to insider threat: what do Australian experts say?

Approaches to the study of organisational vulnerabilities to intentional insider threat has been narrow in focus. Cyber security research has dominated other forms of insider threat research [1]. However, within the scope of cyber security, the effort is predominantly focused on external threats or technological mitigation strategies. Deeper understanding of organisational vulnerabilities influencing in-sider threat and responses to insider threats beyond technological security re-mains limited in Australia. Despite the increasing potential threat and impact of such risk to organisations, empirical studies remain rare. This paper presents an initial study related to identifying organisational vulnerabilities associated with in-tentional insider threat. A Delphi Method was employed as part of a broader mixed methods study. There was a strong consensus amongst Australian experts as to the primary organisational vulnerabilities to insider threat. These main risks extend across personnel, process, technological and strategic (resource allocation) domains. The organisational vulnerabilities identified by Australian experts is consistent with research, literature, and guidelines, available from other countries. The results confirm the need to look beyond the narrow focus on individuals and technology in order to fully address the insider threat problem. Whilst only pre-liminary results are presented here, future analysis of data will focus on identify-ing best practice solutions for the Australian market.

Files associated with this item cannot be displayed due to copyright restrictions.