Stop Internal Frauds / Threats – Digital Assure Limited

What is happening while you read this

Insider risk is not a category of person. It is a category of access. Technical and non-technical, senior and junior, some share of your staff are, at any moment, doing one of the following.

Disgruntled, and planning a financial crime or a network disruption
Testing a newly discovered technique for defrauding the organisation
Using direct server backend access to manipulate or steal customer data
Repeating and sharing tools with colleagues on how to compromise the systems
Bypassing security measures, or researching how to disable the controls
About to resign, and intending to cause damage before leaving
Financially unstable, and under pressure to defraud
Unaware of current attack methods, and about to assist a fraudster without intending to
Leaking confidential documents despite data loss prevention being in place
Acting in ways the traditional tools will never log or catch
Using access rights and privileges they were never granted
Connecting compromised personal or official devices to the network
Running a private business on your IT resources and your paid time
Taking official laptops off the network for transactions that would not survive scrutiny

7%

of annual revenue is lost to internal fraud by the average organisation.

Source: Association of Certified Fraud Examiners

The insiders

The insider threat is real, and growing even as more money goes into internal controls, network monitoring and awareness. Sooner or later the attack comes from one of your own.