Detecting the Threats Within

Insiders have a significant advantage when it comes to penetrating your security. Security solutions such as firewalls and access controls have been built to stop external attackers, not trusted insiders. Whether their intentions are benign or malicious, it is still a threat to your security.

Insider threat actors can be current employees, terminated employees, contractors, vendors, suppliers, or anyone with access to your environment. They can be categorized into three broad buckets:

Negligent Insider

Actors who unknowingly or accidentally compromise data due to bad cyber hygiene practices.

Malicious Insider

Actors who intentionally compromise data.

Compromised Account (Resident Insider)

Actors whose account is compromised and misused for malicious purposes.