Practice 3: Institute Periodic Security Awareness Training for All Employees

Without broad understanding and buy-in from the organization, technical or managerial controls will be short-lived.

What Can You Do?

All employees need to understand that insider crimes do occur, and there are severe consequences. In addition, it is important for them to understand that malicious insiders can be highly technical people or those with minimal technical ability. Ages of perpetrators in the CERT database range from late teens to retirement. Both men and women have been malicious insiders, including introverted “loners,” aggressive “get it done” people, and extroverted “star players.” Positions have included low-wage data entry clerks, cashiers, programmers, artists, system and network administrators, salespersons, managers, and executives. They have been new hires, long-term employees, currently employed, recently terminated, contractors, temporary employee....