Mitigation Strategies

Mitigation strategies for insiders who exploit vulnerabilities in the SDLC to sabotage critical systems include the following.

• Resilient system architecture that allows for efficient recovery or sustains the organization during disasters. The requirements for the architecture should be defined at the beginning of each project so as to set expectations for recovery in the event an incident occurs that disrupts operations.

• Configuration and access control of source code. All attempts to access source code in development and production should be tracked and regular audits of access to source code should be performed.

• Formal code review/inspection to prevent malicious code from being inserted into production systems.