Black Hat Recruiting

An update to the Insider Threat Likelihood Rating

Or: Wholly Scary, Batman!
Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . .

Image courtesy the Microsoft Security Blog

When I gave my talks about the insider threat, I saw the looks on several persons faces as they thought, “not me.”  I get that sentiment, I think that about every one of our employees here at infotex. 

But the threat is real:

All you have to do is read the latest on LAPSUS$.  The cusp, to me:  The graphic on this article.  It’s an ad, looking to recruit insiders. 

It  happens.  And it can happen to ANYBODY.  But if you are “any company providing telecommunications, a large software provider or gaming company, a call center, or a server host, you can make lots of extra money on the side. 

Thus:  the APT is a given.  Thus, we assume breach in Zero Trust.  Thus, the insider threat is real.

Original article by Dan Hadaway CRISC CISA CISM. Founder and Managing Partner, infotex

“Dan’s New Leaf” is a “fun blog to inspire thought in the area of IT Governance.”