CIO/CISO:

You’re busy just trying to keep the organisation safe.

Now you have the compliance police breathing down your neck.

How do you keep them happy?

Thought Leader:

Christopher McNaughton

As an ex detective and global corporate investigator, Chris knows people. He understands Insider Threat is a people challenge and not simply solved through technical solutions.

Thought Leader:

Nicholas Gontscharow

Nicholas brings serious technical ability to the table in the Insider Threat space. Having worked in this area for more than 10 years there aren’t many challenges which Nick can’t meet.

You're a hardworking CIO/CISO trying to keep the organisation safe and secure, but you know the regulators and auditor are circling. You know this means the risk register is going to be filled with risks you will own.

They're coming your way and you know it. They are motivated to find problems and they often don't fully understand the ramifications of what is required to fix them. Business impact and cost isn’t front of mind for a regulator or auditor.

While it is certainly important to identify risk, this lack of in-depth understanding can expose the business to significant impact and cost, both in terms of money and time.

With internal IT Teams stretched to breaking point, implementing new solutions to satisfy regulators or auditors is now simply beyond reach. We often don’t have the resources to even make a start. So, the risk simply stays on the risk register, until you mitigate it, and the conversation with the board becomes increasingly awkward.

A risk which is increasingly finding its way onto risk registers relates to what is known as the Trusted Insider or Insider Threat, if you like. Your first weapon to mitigate this risk is to embrace the fact that 99% of Insider Threat problems begin with people making honest mistakes. Nearly all of this risk is people-related, and people can be guided. There is a huge opportunity to solve both the people problem and mitigate much of your organisational risk.

What qualifies us to advise on Insider Threat? Well, we don’t just sell an endpoint solution and walk away.

We have worked for decades in the Information Security space for some of Australia’s top organisations. That includes; government departments, regulated businesses, global multinationals and small business. We work side by side with CIOs and CISO's, helping them mitigate their risks and giving them a better work-life balance, avoiding the compliance police, and assisting them to build a better security culture within their organisation.

How do you get the compliance police off your back:

1. Not "just another endpoint agent" that needs to be implemented

Another endpoint agent or alerting software that annoys end users, and saps the resources of your internal teams with alerts is not your solution. Visibility to your insider threat risk is almost certainly already in the activity logs in your environment.

You simply need a way to analyse and refine this mountain of data. The SECMON1 platform, ShadowSight™, will tell you which of the events in this mountain of log activity you should be concerned with, and with an almost 0% false positive rate.

You’ll be in the know, in the now!

2. Proactive not reactive risk detection

Insider threat has little to do with technology, it’s all about understanding the people, the problem and having good overarching business processes.

For companies of any size, insider threat – unsanctioned activity by employees – is often unintentional but potentially devastating. Products trying to solve this still treat the 1% of malicious activity as if it were 99% of the problem.

ShadowSight™ is different, it understands that people can be guided to ensure better security practises.

3. Foster a culture of security awareness

There are very few malicious insiders. What is much more common are staff making honest mistakes. We call that doing the wrong thing for the right reason. Just buying a technology solution isn't going to fix your insider threat problem, in fact it may make it worse.

Insider threat is a people problem, so allow people to be a part of the solution.

Driven by an awareness that this problem is human led, ShadowSight™ builds an awareness of business context to report on threats in near real-time accurately. This allows businesses to identify patterns of behaviour, shift company culture and prevent financial and reputational harm.

4. Drive compliance and tick the right boxes

Once an issue finds its way onto the risk register, it must be dealt with - no two ways about it. Moreover, when internal audit say they are going to audit certain issues, such as data breach risk or Insider Threat, then they will make good on their promises. The audit inevitably takes place and findings are made. An auditor rarely finds nothing and Insider Threat is increasingly on the radar.

Once in the risk register, the risk is tracked by the entire business with an owner: and that owner is almost always YOU.

If the board wants you to solve Insider Threat and the compliance police are breathing down your neck, you’ll need a solution that has low to no organisational impact and is rapid to deploy. ShadowSight™ has got you covered for the quickest and most efficient compliance box-ticker there is while also actually being effective at changing the security culture through your entire organisation.