The Role of Education and Awareness in Tackling Insider Threats

Abstract

Insider threats present a major concern for organizations worldwide. As organizations need to provide employees with authority to access data to enable them to complete their daily tasks, they leave themselves open to insider attacks. This chapter looks at those who fall into the category which can be referred to as insiders and highlights the activity of outsourcing which is employed by many organizations and defines the term insider threat while pointing out what differentiates an accidental threat from a malicious threat. The discussion also considers various methods of dealing with insider threats before highlighting the role education and awareness plays in the process, the importance of tailoring awareness programs, and what the future holds for insider threats within organizations.

The Role of Industry-Academia Partnerships Can Play in Cybersecurity:

“…A recent review of the literature on industry-academia collaborations for Cybersecurity reveals several benefits and focus areas for these partnerships. Partnerships can help advance cybersecurity research and translate findings into impactful real-world solutions by bridging gaps between academic research and industry needs ( Smyth et al, 2019). While universities often lack the practical context, companies frequently lack resources for foundational research.…”

Factors Contributing to Cybersecurity Awareness, Education and Training

“…The factors that contribute to cybersecurity awareness are the users knowledge, attitude and behaviours (Muhirwe & White, 2016). Efforts towards user awareness and ongoing education are both considered essential in the fight against of cyber threats (Smyth, Curran, & McKelvey, 2019). Awareness, educational programmes and training can drive an effective and appropriate cybersecurity culture (Smyth, Curran, & McKelvey, 2019).…”

“…However, it is noted that organisation may find that implementing effective cybersecurity education and training is challenging. Cybersecurity education should assist users in understanding various concepts (Javidi & Sheybani, 2018) and additionally it should be targeted such that it helps users stop old behaviours and adopt new practices aligned with internet safety (Smyth, Curran, & McKelvey, 2019).…”