Connect with us
https://tickernews.co/wp-content/uploads/2023/10/AmEx-Thought-Leaders.jpg

Ticker Views

Why insider risk management should be a priority in 2025

Insider threats are rising—here’s why businesses must prioritise insider risk management in 2025.

Published

on

Insider threats are rising—here’s why businesses must prioritise insider risk management in 2025.

You know that feeling when you accidentally send a wrong email to your colleague? We’ve all been there! I recently had my own awkward moment when I sent a wink emoji in a professional email that definitely should not have had one. While these small slip-ups might just cause momentary embarrassment, they highlight a much bigger concern: insider risk management.

Insiders – employees, vendors, or partners – open risks to organisations. Whether accidental or malicious misuse of sensitive information, insider incidents can result in financial losses, regulatory fines, intellectual property theft, or damage to a business’ reputation. Forrester’s recent Security Survey finds that 22% of data breaches are caused by internal incidents.

I had the pleasure of interviewing Joanne Klein, CEO of NexNovus (the saying ‘don’t meet your hero’ is WRONG in this case!). Joanne really opened my eyes to just how crucial this topic has become. While my email faux pas might seem trivial, the real scope of insider risks is far more serious and potentially devastating for organizations.

The Digital Tsunami We’re Facing

Think about all the ways we share information in today’s workplace: emails with sensitive attachments, SharePoint and OneDrive document sharing, Teams chats containing personal information, and quick file transfers that might seem harmless in the moment.

Joanne explains, “As that digital footprint grows, so do the data risks that go along with that.” Microsoft reported that SharePoint and OneDrive alone see an additional 2 million files uploaded every minute. Yes, you read that right — every minute! It’s like trying to keep track of every grain of sand on a beach as additional truckloads of sand are being dumped in the same place.

What Exactly is Insider Risk Management?

Gartner defines insider risk management as tools and capabilities that measure, detect, and contain undesirable behavior of trusted accounts in the organization. It includes solutions that monitor the behavior of employees, service partners, and key suppliers working inside the organization. These tools then evaluate whether behavior falls within the expectations of the role and corporate risk tolerance.

Joanne adds that it is about “balancing the need to monitor activities while balancing user privacy and organizational risk.” We’re looking to find, mitigate, and, hopefully, stop altogether security threats from people within an organization to maintain an ethical working environment.

But here’s what I found particularly interesting, because it’s often missing by organizations: successful insider risk management isn’t just about implementing sophisticated tools — it’s about building trust with your employees.

WATCH THE TECH EDGE HERE

The Human Element: Trust Goes Both Ways

Employees can be a little uneasy with this type of monitoring solution, so the best practice is to be transparent about what the company is doing while ensuring proper privacy controls are in place. Modern tools use anonymization techniques so investigators or admins can assess risky activities without knowing who’s involved, also removing personal bias from the equation.

But it’s really a two-way street where companies should also expect their employees to meet the requirements to secure their data and information. One of the most common scenarios is a departing employee. There’s often confusion about who owns the content created during employment, and some folks might feel entitled to take their work with them by downloading confidential information and saving it in personal devices emailing out documents — it doesn’t quite work that way!

How Serious Can It Get?

In May 2023, Tesla’s massive data breach served as a wake-up call where two former employees leaked nearly 100 gigabytes of confidential documents. We’re talking about personal information of more than 75,000 people, customer files from 2015 to 2022, and production secrets. What are the consequences of this insider’s wrongdoing? They range from lawsuits to penalties that severely damage the brand’s confidence and its bottom line.

An organization’s data is really one of its most valuable assets, so protecting it and preventing its loss is a top priority. However, the challenge is the limited resources that companies have nowadays. Admins will not be able to detect, monitor, and take appropriate actions given the massive growth in the digital footprint. It’s like asking them to do more with less.

Chief information security officers (CISOs) and cybersecurity leaders emphasize the importance of an integrated approach combining preventive controls, human risk management, detection and investigation, and incident response. Policies, guidelines, and investigative work that are outside the bounds of a typical cybersecurity scope are components of insider risk management. Effectively mitigating insider risks requires collaboration among many cross-functional stakeholders — treating it more as a human problem rather than a technical issue.

WATCH THE TECH EDGE HERE

3 Recommendations for Intelligent Risk Management Solutions

  1. Implement automated monitoring with privacy controls. Why? Because manual checking of audit logs is like trying to count raindrops in a storm. Automated tools can continuously assess data-related activities and adapt to changing conditions. For instance, when an employee submits their resignation, the system can automatically elevate their risk level and adjust monitoring accordingly. This saves your admins time while ensuring nothing slips through the cracks.
  2. Establish a comprehensive employee training program. The reasoning is simple: your employees are both your first and last line of defense. Start with thorough onboarding processes and implement regular attestations. Make data handling guidelines clear and part of your corporate culture. Joanne also pointed out, “Most employees definitely want to do the right thing,” so give them the tools and knowledge to do so. This isn’t just about rules — it’s about creating a culture of security awareness.
  3. Create clear data classification systems. Here’s why these matters: not all data is created equal. You need to be able to distinguish between confidential information and general documentation. Implement a clear system for classifying documents and setting appropriate monitoring levels for each category. This helps prevent both accidental sharing of sensitive information and deliberate data exfiltration. Remembering Joanne’s point: “It’s really important to be able to discern what’s confidential versus what’s just benign.”

Key Takeaways

Insider risk management isn’t just an IT issue, it’s a business survival issue. While we can laugh about accidental emoji slip-ups, the real risks lurking in our digital interactions are no laughing matter. By implementing these recommendations, you’re not just protecting your organization’s data; you’re building a foundation of trust and security that benefits everyone.

Alyssa Blackburn is the Director of Records & Information Strategy  at AvePoint

Ticker Views

DOJ reveals high-profile names linked to Epstein case

DOJ reveals prominent figures linked to Epstein case, including Trump, sparking renewed interest and calls for transparency.

Published

on

DOJ reveals prominent figures linked to Epstein case, including Trump, sparking renewed interest and calls for transparency.


The Department of Justice has released a list of prominent individuals connected to the Jeffrey Epstein case, including current President Donald Trump. This disclosure comes as part of its formal response to Congress and the Epstein Files Transparency Act. The move has reignited public interest in one of the most controversial investigations in recent history.

Oz Sultan from Sultan Interactive Group provides insight into what this list could mean for ongoing investigations, and why transparency is a critical factor in holding powerful figures accountable.

Subscribe to never miss an episode of Ticker – https://www.youtube.com/@weareticker


Download the Ticker app

Continue Reading

Ticker Views

Trump scraps key climate law, U.S. emissions regulation at risk

Published

on

Trump has scrapped the long-standing legal basis for tackling climate emissions

Robyn Eckersley, The University of Melbourne

Regulating climate emissions just became more difficult. US President Donald Trump announced on Thursday the Environmental Protection Agency (EPA) has repealed its own 2009 legal finding that greenhouse gas emissions endanger human health.

Vindicated by a Supreme Court ruling in 2007, and based on scientific evidence, this so-called endangerment finding by the EPA provided the legal warrant for the regulation of greenhouse gases by the federal government. It underpinned the Obama administration’s Clean Power Plan, which regulated emissions from power plants. In his first term, Trump had tried to weaken it but a new version was introduced by the Biden administration.

Without the endangerment finding, and in the absence of new laws passed by both Houses of Congress, the federal government lacks the legal mandate for direct regulation of greenhouse emissions. The science hasn’t changed, but the obligation to act on it has been scrubbed out.

If you imagine the United States as a collection of big greenhouse gas pots with lids, the Trump administration has been lifting the lids off one by one, releasing more emissions by stepping up fossil fuel extraction, production and consumption. This legal finding held down the biggest lid on climate emissions — and Trump has pulled it right off. This will have a structural effect globally.

What is the endangerment finding, and how was it developed?

In 1970, when the US environment movement was at its most influential, Congress passed an important piece of legislation called the Clean Air Act. It empowered the new Environmental Protection Agency (EPA) to declare something a pollutant if it endangered public health. Initially, it was used to regulate pollutants such as smog or coal ash, the byproducts of industry.

During the George W. Bush presidency, the EPA made a ruling that greenhouse gases were also a pollutant within the meaning of the Clean Air Act. This ruling was challenged in 2007 by fossil fuel interests in the case of Massachusetts v EPA, but the court ruled (five judges to four) that carbon dioxide and other greenhouse gases were “air pollutants” that endangered human health and welfare. It directed the EPA to assess their impact on human welfare — allowing the agency to regulate them.

However, the Bush administration did not push the EPA to implement the ruling.

How was the endangerment finding used for climate action?

President Barack Obama promised to act on climate during his election campaign but faced a hostile Senate when he came to power. His efforts to enact an emission trading bill failed.

However, the endangerment finding allowed him to use his executive power to direct the EPA to regulate emissions. In his first term, the EPA issued new vehicle emissions regulations for cars and light trucks, and some power plants and refineries.

In his second term, Obama extended those regulations to all power plants. These moves represented the US’s first significant steps towards emissions reductions. They enhanced Obama’s diplomatic credibility in the negotiations for the Paris Agreement in 2015. This provided a footing for bilateral cooperation with China on clean energy, helping to build diplomatic trust between the world’s two biggest emitters. Their lead negotiators worked together in the final days of the negotiations to get the Paris Agreement over the line.

Why has Trump overturned it?

On February 12, Trump announced the EPA would rescind the legal finding it has relied on for nearly 20 years. Among all the wrecking balls he has swung at efforts to decarbonise the US economy, this is the biggest. He claims the legal finding hurts Americans. The EPA’s director, Trump-appointed Lee Zeldin, called the rule the “holy grail of climate change religion”.

“This determination had no basis in fact — none whatsoever,” Trump told the media on Thursday. “And it had no basis in law. On the contrary, over the generations, fossil fuels have saved millions of lives and lifted billions of people out of poverty all over the world.”

But without federal action to curb emissions, the impact of climate change will intensify. The US is the “indispensable state” when it comes achieving the goals and principles of the Paris Agreement. Although China’s annual aggregate emissions are much higher than the US’s, the US is the world’s largest historical emitter, which makes it the most causally responsible for the global heating that has already occurred.

Yet the Trump administration regards climate change as a hoax. Trump has withdrawn the US not only from the Paris Agreement but also the UN Framework Convention on Climate Change. In short, the US is now actively fanning the flame of global heating.

In a case of history repeating itself, the arguments being made by Zedlin are pretty much the same as those once put forward by the original opponents of the endangerment finding: claiming that the original legislation was supposed to apply only to local pollutants such as smog, but not greenhouse gases, and that the science isn’t clear.

Those arguments don’t stack up, because there is indisputable evidence that increasing concentrations of greenhouse gases do indeed harm human health and welfare. The EPA is obliged to regulate harmful pollutants at the specific source.

What’s next?

This move will trigger court cases, which won’t be resolved quickly. Zedlin and Trump will face a crowd of litigants, including environment groups and NGOs. The Trump administration will likely ignore these and steam ahead with its “drill, baby, drill” slogan.

If the lawsuits fail, or Trump ignores them, it will be devastating. There will be no overarching federal legislation directly regulating emissions in the US. What’s more, a new Democrat president committed to climate action will not have this easy lever to regulate greenhouse gases. Instead, they will have to get new climate legislation through an intensely polarised Congress.

However, there are ways forward. Assuming Trump is prepared to leave office after his second term (admittedly, a big if), it is possible a new Democratic administration might have the numbers in Congress to enact new climate legislation. In the meantime, climate action is continuing to ratchet up at the state and city level in many US states.The Conversation

Robyn Eckersley, Redmond Barry Professor of Political Science, School of Social and Political Sciences, The University of Melbourne

This article is republished from The Conversation under a Creative Commons license. Read the original article.

Continue Reading

Ticker Views

Global rallies show support for Iran as sanctions and tensions rise

Global protests support Iran as tensions rise; Canada imposes sanctions and U.S. considers military plans.

Published

on

Global protests support Iran as tensions rise; Canada imposes sanctions and U.S. considers military plans.


Over a million people have taken to the streets worldwide to support protests in Iran. Major gatherings were reported in Toronto, Los Angeles, and Munich, highlighting growing international concern as political tensions escalate. Protesters waved flags and displayed powerful symbols of solidarity for those in Iran demanding change.

Canada has announced new sanctions targeting Iranian officials, while the U.S. is preparing military contingency plans amid ongoing tensions. These developments come as global attention focuses on diplomatic efforts and the potential for broader international impact.

Professor Tim Harcourt from UTS shares his insights into the global response and the role of exiled figures like Prince Reza Pahlavi in mobilising support.

Subscribe to never miss an episode of Ticker – https://www.youtube.com/@weareticker


Download the Ticker app

Continue Reading

Trending Now