Insider Threat with Lisa Forte

In this episode, Lisa Forte, founder of Red Goat, joins Ciaran and James to discuss risk, security and the threat from within. Lisa offers her expertise on insider threat, crisis management, and high risk adventures.
Highlights:
Insider threat; the breakdown
U.S. CERT definitions and mitigation
• Defining Insider Threats | CISA (cisa.gov/topics/physical-security/insider-thre…) | Insider Threat Mitigation Guide (cisa.gov/sites/default/files/2022-11/Insider%2…)
NPSA guidance and tools
• Insider Risk | NPSA (npsa.gov.uk/insider-risk) | Reducing Insider Risk | NPSA (npsa.gov.uk/reducing-insider-risk)
A pervasive problem
• SANS – Decoding: “Insider Threat” (sans.org/blog/decoding-insider-threat)
• Forget the outside hacker, the bigger threat is inside • The Register (theregister.com/2023/10/26/register_kettle_ins…) Surveillance won’t curb insider threats — but workplace culture can | Security Magazine (securitymagazine.com/articles/98691-surveillan…)
Red Goat Security research into the barriers preventing reporting.
• Insider Threat Report 2019 (red-goat.com/wp-content/uploads/2022/06/Red-Go…)
Additional Resources:
Red Goat Cyber Security (red-goat.com)
Whistleblowing for employees (gov.uk/whistleblowing)
Contact:
Have questions or comments? Email us at cyberleadersnetwork@sans.org