Connect with us
https://tickernews.co/wp-content/uploads/2023/10/AmEx-Thought-Leaders.jpg

Ticker Views

Why insider risk management should be a priority in 2025

Insider threats are rising—here’s why businesses must prioritise insider risk management in 2025.

Published

on

Insider threats are rising—here’s why businesses must prioritise insider risk management in 2025.

You know that feeling when you accidentally send a wrong email to your colleague? We’ve all been there! I recently had my own awkward moment when I sent a wink emoji in a professional email that definitely should not have had one. While these small slip-ups might just cause momentary embarrassment, they highlight a much bigger concern: insider risk management.

Insiders – employees, vendors, or partners – open risks to organisations. Whether accidental or malicious misuse of sensitive information, insider incidents can result in financial losses, regulatory fines, intellectual property theft, or damage to a business’ reputation. Forrester’s recent Security Survey finds that 22% of data breaches are caused by internal incidents.

I had the pleasure of interviewing Joanne Klein, CEO of NexNovus (the saying ‘don’t meet your hero’ is WRONG in this case!). Joanne really opened my eyes to just how crucial this topic has become. While my email faux pas might seem trivial, the real scope of insider risks is far more serious and potentially devastating for organizations.

The Digital Tsunami We’re Facing

Think about all the ways we share information in today’s workplace: emails with sensitive attachments, SharePoint and OneDrive document sharing, Teams chats containing personal information, and quick file transfers that might seem harmless in the moment.

Joanne explains, “As that digital footprint grows, so do the data risks that go along with that.” Microsoft reported that SharePoint and OneDrive alone see an additional 2 million files uploaded every minute. Yes, you read that right — every minute! It’s like trying to keep track of every grain of sand on a beach as additional truckloads of sand are being dumped in the same place.

What Exactly is Insider Risk Management?

Gartner defines insider risk management as tools and capabilities that measure, detect, and contain undesirable behavior of trusted accounts in the organization. It includes solutions that monitor the behavior of employees, service partners, and key suppliers working inside the organization. These tools then evaluate whether behavior falls within the expectations of the role and corporate risk tolerance.

Joanne adds that it is about “balancing the need to monitor activities while balancing user privacy and organizational risk.” We’re looking to find, mitigate, and, hopefully, stop altogether security threats from people within an organization to maintain an ethical working environment.

But here’s what I found particularly interesting, because it’s often missing by organizations: successful insider risk management isn’t just about implementing sophisticated tools — it’s about building trust with your employees.

WATCH THE TECH EDGE HERE

The Human Element: Trust Goes Both Ways

Employees can be a little uneasy with this type of monitoring solution, so the best practice is to be transparent about what the company is doing while ensuring proper privacy controls are in place. Modern tools use anonymization techniques so investigators or admins can assess risky activities without knowing who’s involved, also removing personal bias from the equation.

But it’s really a two-way street where companies should also expect their employees to meet the requirements to secure their data and information. One of the most common scenarios is a departing employee. There’s often confusion about who owns the content created during employment, and some folks might feel entitled to take their work with them by downloading confidential information and saving it in personal devices emailing out documents — it doesn’t quite work that way!

How Serious Can It Get?

In May 2023, Tesla’s massive data breach served as a wake-up call where two former employees leaked nearly 100 gigabytes of confidential documents. We’re talking about personal information of more than 75,000 people, customer files from 2015 to 2022, and production secrets. What are the consequences of this insider’s wrongdoing? They range from lawsuits to penalties that severely damage the brand’s confidence and its bottom line.

An organization’s data is really one of its most valuable assets, so protecting it and preventing its loss is a top priority. However, the challenge is the limited resources that companies have nowadays. Admins will not be able to detect, monitor, and take appropriate actions given the massive growth in the digital footprint. It’s like asking them to do more with less.

Chief information security officers (CISOs) and cybersecurity leaders emphasize the importance of an integrated approach combining preventive controls, human risk management, detection and investigation, and incident response. Policies, guidelines, and investigative work that are outside the bounds of a typical cybersecurity scope are components of insider risk management. Effectively mitigating insider risks requires collaboration among many cross-functional stakeholders — treating it more as a human problem rather than a technical issue.

WATCH THE TECH EDGE HERE

3 Recommendations for Intelligent Risk Management Solutions

  1. Implement automated monitoring with privacy controls. Why? Because manual checking of audit logs is like trying to count raindrops in a storm. Automated tools can continuously assess data-related activities and adapt to changing conditions. For instance, when an employee submits their resignation, the system can automatically elevate their risk level and adjust monitoring accordingly. This saves your admins time while ensuring nothing slips through the cracks.
  2. Establish a comprehensive employee training program. The reasoning is simple: your employees are both your first and last line of defense. Start with thorough onboarding processes and implement regular attestations. Make data handling guidelines clear and part of your corporate culture. Joanne also pointed out, “Most employees definitely want to do the right thing,” so give them the tools and knowledge to do so. This isn’t just about rules — it’s about creating a culture of security awareness.
  3. Create clear data classification systems. Here’s why these matters: not all data is created equal. You need to be able to distinguish between confidential information and general documentation. Implement a clear system for classifying documents and setting appropriate monitoring levels for each category. This helps prevent both accidental sharing of sensitive information and deliberate data exfiltration. Remembering Joanne’s point: “It’s really important to be able to discern what’s confidential versus what’s just benign.”

Key Takeaways

Insider risk management isn’t just an IT issue, it’s a business survival issue. While we can laugh about accidental emoji slip-ups, the real risks lurking in our digital interactions are no laughing matter. By implementing these recommendations, you’re not just protecting your organization’s data; you’re building a foundation of trust and security that benefits everyone.

Alyssa Blackburn is the Director of Records & Information Strategy  at AvePoint

Continue Reading

Ticker Views

Cut emissions 70% by 2035? There’s only one policy that can get us there

Published

on

Rod Sims, The University of Melbourne

Australia’s new emission reduction target of 62–70% by 2035 is meant to demonstrate we are doing our part to hold climate change well below 2°C.

The new target can just about do this if we hit the upper end of the range.

To get there, Climate Change and Energy Minister Chris Bowen today outlined new funding to help industry go clean and boost clean energy financing and clean fuels.

On top of our existing policies, these don’t look to be enough to trigger the step change needed. But there is a deeper problem. At present, the government’s approach is one of command and control. Canberra is deciding what goes ahead and what doesn’t. This approach is not only inefficient but has a very real limit – how far the public purse will stretch.

Far and away the best option to rapidly cut emissions is to once again price carbon. When it costs money to emit carbon dioxide and other greenhouse gases, markets start shifting huge amounts of money into clean alternatives. The funds raised can help strengthen the budget – and compensate consumers, who are currently not being compensated for current policy costs.

The question now is whether the government can shake off their memory of the political turmoil around the introduction of the last carbon price introduced in 2012 – especially given this turmoil had much to do with constant leadership changes.

Is this range the “sweet spot”?

Prime Minister Anthony Albanese described the long-anticipated 2035 target range as a “sweet spot”, while Minister Bowen said anything more ambitious than 70% was not achievable.

While this focus on achievability is commendable, it’s also unfortunately true that Australia’s remaining carbon budget is shrinking rapidly.

Globally, this budget represents the emissions that can still be emitted with a good chance of keeping warming under 2°C. Australia’s share is about 10 billion tonnes of carbon dioxide equivalent between 2013 and 2050, when we have pledged to hit net zero.

At present, our emissions are about 440 million tonnes a year, which would mean using up our budget by 2036 – well short of 2050. So we must accelerate emission reduction.

Some experts argue a lower target than just announced is appropriate, given policies aren’t in place to achieve more. But this is self-defeating – the focus must be on having the appropriate policies.

aerial view of solar farm.
Renewables have ramped up quickly. But much more clean energy will be needed to meet emissions targets.
Abstract Aerial Art/Getty

Reaching this target requires better policies

Australia’s current suite of policies are leading to slow declines in emissions.

Unfortunately, the government’s new and existing policies don’t seem up to the task of meeting the 43% by 2030 target, let alone the new 62–70% cuts five years later.

To date, the government has heavily relied on two policies to bring emissions down. Both have flaws.

The first is the Capacity Investment Scheme, which underwrites renewable energy generation and storage projects. In the absence of a carbon price, the government needs to underwrite projects as there is no green premium to create incentives for market-led investment. The government, not the market, is deciding which clean energy projects proceed.

Underwriting new projects comes with a large contingent liability, as the Commonwealth budget is partly underwriting these projects. The scheme is proceeding more slowly than the government hoped.

The second is the Safeguard Mechanism, which requires major industrial emitters to progressively lower their emissions. The scheme covers less than 30% of the economy and applies to emissions intensity rather than overall emissions, meaning higher production can lead to higher emissions.

Today, the government announced A$5 billion to support large industrial facilities to make major investments in decarbonisation and energy efficiency, $1 billion for a clean fuel fund, $2 billion to accelerate renewable project rollout and additional funding for household decarbonisation and kerbside EV charging. As it stands, these don’t seem sufficient.

Outside the land use sector, Australia’s emissions have remained broadly flat since 2005. They haven’t risen sharply, but they have not declined. If the government restricts itself to small adjustments to existing policies, this is unlikely to change.

a high view of an open cut coal mine, with piles of coal and roads visible.
A carbon price would give markets a clear incentive to switch from high emitting sources of power to low.
mikulas1/Getty

Time to look at a carbon price

It would be far simpler to reintroduce a carbon price.

For two years from June 2012, Australia had a carbon price. It worked. Markets funded lower-emission power sources over higher-emission ones. But the scheme became politically fraught and was repealed. Since then, pricing carbon has been seen as politically unviable.

This paralysis is unfortunate. We need to judge what is politically possible today, not what happened a decade ago. Notably, in 2021, the Morrison Coalition government released modelling showing a carbon price would be necessary to reach net zero.

With a carbon price off the table, the government is left with expensive and slow policies. Worse, it faces significant political risks if it fails to meet its own targets while increasing costs to consumers – without the revenue a carbon price could provide as compensation.

Much of the debate over carbon pricing is between supporters of climate action and those who oppose any action to reduce emissions. Those wanting climate action have been forced to fight on weaker ground defending inefficient measures. It’s counterproductive not to use the most efficient mechanism to reduce emissions.

Unlock the private sector – by pricing carbon

To make real headway towards cutting emissions, Australia needs to energise the private sector.

Here, too, the best way is to price carbon. This would mean fossil fuel producers and users would have to pay for the damage their products do. Without this incentive to reduce emissions, companies will not take action.

The fault lies with government. Having identified greenhouse emissions as a major and growing problem, successive governments have refused to take the obvious step to fix it: make pollution cost money.

In 2025, it’s very unlikely any private investor will build new fossil fuel generation, other than gas peaking plants to firm renewables. No investor will build extremely expensive and slow nuclear plants.

That means the electricity grid can only meet rising demand – particularly from the enormous growth in data centres – if we add much more renewable energy, firmed by storage or gas.

Over time, the budget would improve from the proceeds of the carbon price, and productivity would grow as Australia’s expensive and somewhat arbitrary methods of cutting emissions would no longer be needed.

A carbon price is needed now to underpin our electricity market, and so our economy, improve our budget position and productivity – and to meet or surpass new emission reduction targets.

2035 is just ten years away. If the government prices carbon, Australia could achieve very rapid reductions – potentially as high as 75%.The Conversation

Rod Sims, Enterprise Professor, Melbourne Institute of Applied Economic and Social Research, The University of Melbourne

This article is republished from The Conversation under a Creative Commons license. Read the original article.

Continue Reading

Ticker Views

Albanese leaves PNG with major defence treaty still a work in progress

Published

on

Michelle Grattan, University of Canberra

Prime Minister Anthony Albanese put the best face on the situation after his plan to sign a major defence treaty with Papua New Guinea while in Port Moresby fell through.

Albanese said he expected the signing of the treaty – of which the wording was approved – to be finalised “in coming weeks”.

The government hopes the coming regular annual ministerial meeting between the two countries, on a date to be fixed, would provide the opportunity to finally land the treaty. Australia is hosting the meeting this year.

Instead of the treaty signing, Albanese and PNG Prime Minister James Marape issued a joint communique saying the two countries had agreed on a text of a Mutual Defence Treaty “which will be signed following Cabinet processes in both countries”.

The treaty would “elevate the defence relationship between Papua New Guinea and Austrlia. to an Alliance”, it said.

This is the second time within weeks Albanese’s plans for finalising a treaty with a regional country have been dashed. Last week he was unable to land a $500 million agreement with Vanuatu.

Albanese has been in PNG this week for the 50th anniversary of the country’s independence. Earlier in the week, he said the signing had been delayed because a PNG cabinet quorum could not be summoned after cabinet members had returned to their home areas for the celebrations.

Albanese told a joint Wednesday news conference with Marape: “We respect the processes of the Papua New Guinea government. What this is about is the processes of their cabinet.”

Both leaders made the point that the treaty had been sought by PNG.

Asked whether the signing delay could open a window for China to try to scuttle the deal, Marape said there was “no way, shape or form” that China could have any hand in telling PNG not to have the treaty.

While it had been a friend of PNG for the last 50 years, China knew that PNG had “security partners of choice,” Marape said.

But he said that in the next couple of days he would send the PNG defence minister first to China and then to other countries, including the United States, France, India, Indonesia, Malaysia, Singapore, and the Philippines “to inform them all exactly what this is all about”.

The joint communique said the proposed Pukpuk treaty would include “a mutual defence Alliance which recognises that an armed attack on Australia or Papua New Guinea would be a danger to the peace and security of both countries”.

In other provisions the treaty also covers the recruitment of PNG citizens into the Australian Defence Force.

It would also ensure “any activities, agreements or arrangements with third parties would not compromise the ability” of PNG or Australia to implement the treaty.

Albanese said the treaty would “be Australia’s first new alliance in more than 70 years and only the third in our entire history, along with the ANZUS treaty with New Zealand and the United States”.The Conversation

Michelle Grattan, Professorial Fellow, University of Canberra

This article is republished from The Conversation under a Creative Commons license. Read the original article.

Continue Reading

Ticker Views

Charlie Kirk shooting suspect had ties to gaming culture and the ‘dark internet’

Published

on

Matthew Sharpe, Australian Catholic University

Tyler Robinson, the 22-year-old Utah man suspected of having fatally shot right-wing activist Charlie Kirk, is reportedly not cooperating with authorities.

Robinson was apprehended after a more than two-day manhunt and is being held without bail at the Utah County Jail.

While a motive for the shooting has yet to be established, Utah Governor Spencer Cox has highlighted Robinson’s links to gaming and the “dark internet”.

Bullet casings found at the scene were inscribed with various messages evoking gaming subcultures. One of the quotes – “Notices bulges, OwO what’s this” – can be linked to the furry community, known for role-playing using animal avatars.

Another message – “Hey, fascist! Catch! ↑ → ↓↓↓” – features arrow symbols associated with an action that allows players to drop bombs on their foes in Helldiver 2, a game in which players play as fascists fighting enemy forces.

One casing reads “O Bella ciao, Bella ciao, Bella ciao, Ciao, ciao!”, words from an Italian anti-Mussolini protest song, which also appears in the shooter game Far Cry 6. Yet another is a homophobic jibe: “if you read this you are gay LMAO”.

If Robinson does turn out to be a shooter radicalised through online gaming spaces, he would not be the first. Previous terrorist shootings at Christchurch (New Zealand), Halle (Germany), Bærum (Norway), and the US cities of Buffalo, El Paso and Poway were all carried out by radicalised young men who embraced online conspiracies and violent video games.

In each of these cases, the shooter attempted (and in all but the Poway shooting, succeeded) to live stream the atrocities, as though emulating a first-person shooter game.

A growing online threat

The global video game market is enormous, with an estimated value of almost US$300 billion (about A$450 billion) in 2024. Of the more than three billion gamers, the largest percentage is made up of young adults aged 18–34.

Many of these are vulnerable young men. And extremist activists have long recognised this group as a demographic ripe for radicalisation.

As early as 2002, American neo-Nazi leader Matt Hale advised his followers “if we can influence video games and entertainment, it will make people understand we are their friends and neighbours”.

Since then, far-right groups have produced ethnonationalist-themed games, such as “Ethnic Cleansing” and “ZOG’s Nightmare”, in which players defend the “white race” against Islamists, immigrants, LGBTQIA+ people, Jews and more.

Studying radicalisation in gamer circles

For many, the Kirk shooting has resurfaced the perennial question about the link (or lack thereof) between playing violent video games and real-world violence.

But while this is an important line of inquiry, the evidence suggests most radicalisation takes place not through playing video games themselves, but through gaming platform communication channels.

In 2020, my colleagues and I studied an extraordinary data dump of more than nine million posts from the gaming platform Steam to understand this process.

We found evidence of radicalisation occurring through communication channels, such as team voice channels. Here, players establish connections with one another, and can leverage these connections for political recruitment.

The radicalisation of vulnerable users is not instantaneous. Once extremists have connected with potential targets, they invite them into platforms such as Discord or private chat rooms. These spaces allow for meme and image sharing, as well as ongoing voice and video conversations.

Skilful recruiters will play to a target’s specific grievances. These may be personal, psycho-sexual (such as being unable to gain love or approval), or related to divisive issues such as employment, housing or gender roles.

The recruit is initiated into a fast-changing set of cynical in-jokes and in-group terms. These may include mocking self-designations, such as the Pepe the Frog meme, used by the far-right to ironically embrace their ugly “political incorrectness”. They also use derogatory terms for “enemies”, such as “woke”, “social justice warriors”, “soyboys”, “fascists” and “cultural Marxists”.

Gradually, the new recruit becomes accustomed to the casual denigration and dehumanisation of the “enemies”.

Dark and sarcastic humour allow for plausible deniability while still spreading hate. As such, humour acts an on-ramp to slowly introduce new recruits to the conspiratorial and violent ideologies that lie at the heart of terrorist shootings.

Generally, these ideologies claim the world is run by nefarious and super-powerful plutocrats/Jews/liberals/communists/elites, who can only be stopped through extreme measures.

It then becomes a question of resolve. Who among the group is willing to do what the ideology suggests is necessary?

What can be done?

The Australian Federal Police, as well as the Australian parliament, has recognised the threat of violence as a result of radicalisation through online gaming. Clearly, it’s something we can’t be complacent about.

Social isolation and mental illness, which are sadly as widespread in Australia as they are elsewhere, are some of the factors online extremists try to exploit when luring vulnerable individuals.

At the same time, social media algorithms function to shunt users into ever more sensational content. This is something online extremists have benefited from, and learned to exploit.

There is a growing number of organisations devoted to trying to prevent online radicalisation through gaming platforms. Many of these have resources for concerned parents, teachers and care givers.

Ultimately, in an increasingly online world, the best way to keep young people safe from online radicalisation is to keep having constructive offline conversations about their virtual experiences, and the people they might meet in the process.The Conversation

Matthew Sharpe, Associate Professor in Philosophy, Australian Catholic University

This article is republished from The Conversation under a Creative Commons license. Read the original article.

Continue Reading

Trending Now