Bright Ideas We’re Following

In July 2023, Strider Technologies released a new report on China’s industrial recruiting strategy. If you are in any way involved in Insider Risk Management, there is a wealth of information here about how external entities are targeting the workforces we support. Adding these insights to internal data points can help you and your teams focus limited resources on what really matters. Their approach appeals to our focus on counterintelligence as a critical program core competency.

We’re excited about Strider’s approach to this aspect of insider risk management. Established specifically to support commercial industries, Strider is quickly building the next cornerstone of insider and third party risk management, and supply chain risk and due diligence programs. You can access this report here.

For global metrics, we follow the Ponemon Institute’s “Cost of Insider Risks” report and Verizon’s Data Breach Investigations Report. Combined, these two reports show that insiders were involved in almost 90% of breaches and provides updated average costs per incident throughout industry. We use these authoritative survey results to inform our program messaging campaigns. You can access this report here, and the 2023 DBIR here.

It’s on the shelves! Dr. Shaw’s new book, The Psychology of Insider Risk: Detection, Investigation and Case Management (2023) is next up on our reading list. The growing field of Insider Risk Management is all about people, and this book offers updated recommendations for the various organizational disciplines responsible for influencing people’s experience in the workplace and responding to issues. You can find it here on Amazon.

September 2023 rang in this year’s National Insider Threat Awareness Month. The U.S. Executive Director of National Intelligence assembled resources here, and you can find additional resources from NCSC’s National Insider Threat Task Force here.

This year’s national them was “Bystander Engagement” - an effort to move from ideas to action. If you are looking for authoritative U.S. Government perspectives, recommendations, and enterprise messaging topics for your Insider Risk Management Program, this is a great place to start.