Social Engineering, Insider and Cyber Threat

Social Engineering, Insider and Cyber ThreatMike Gillespie – MD Advent IM Ltd The UKs Leading Independent, Holistic Security Consultancy

coming up

what we mean by Social Engineering and Insider Threat

what this means to Cyber Threat

buildings and technology, combined with people, offer cyber terrorists and criminals not only more targets, but more tools

serious cyber crime can start before anyone logs onto anything

people are our weakest link and cross security disciplines

our attitude to security and security awareness training needs to evolve

joining the dots and the holistic approach

preparation is everything – even in cyberspace

Social Engineering & Insider Threat

some images courtesy of freedigitalphotos.net

Social Engineering & Insider Threat

some images courtesy of freedigitalphotos.net

what does this mean for cyber threat and crime?

Intelligence gathering

Greater chance of cyber success

what does this mean for cyber threat and crime?

Followed target into building or

pose as contractor

Watched building to

select target

‘Bumped into’ target

and engaged in

conversation – trust gained

‘Borrowed’ their mobile

device

Researched target and

‘friends’ via social

networks

…and/or their pass

Gained access to

server

The cyber attack technically starts here…

Joining the dots and the holistic approach

• Realistic holistic Threat and Risk Assessments that don’t isolate ‘cyber’

• Realistic appropriate action and policies• C-level commitment and leadership• Top down security culture health• Holistic Security Awareness Training for all staff • Regular refreshers as part of the virtuous security cycle

security evolution

Joining the dots…27001 in words…

• Continuous improvement (PDCA)• Ensure and Assure• Confidentiality, Integrity, Availability• Risk based• Proportionate• Governance• Compliance

the standard…

• Asset management• HR• Physical security• Communications and Operations• Access Control• System Development• DR, BCM and Incident Management• Compliance

Establish the ISMS

Maintain & improve the

Monitor & review the

Implement & operate the ISMS

Development, maintenance

& improvement

ISO27001 in pictures…

And so…

people are our weakest link and cross security disciplines

buildings and technology, combined with people, offer cyber terrorists and criminals not only more targets, but more tools

serious cyber crime can start before anyone logs onto anything

our attitude to security and security awareness training needs to evolve

thank youSocial Engineering, Insider and Cyber Threat

www.advent-im.co.ukwww.adventim.wordpress.com

@Advent_IMwww.linkedin.com/company/advent-im

0121 559 66990207 100 1124

Social Engineering, Insider and Cyber Threat

Business

Simulating Insider Cyber-Threat Risks: A Model-Based Case and a … · 2005-08-11 · Simulating Insider Cyber-Threat Risks – Proc. Int’l Conference of Sys Dynamics Society, 2005

How workplace satisfaction affects insider threat ...€¦ · detecting potentially malicious insider cyber threats and enabling the visualization of threats as they occur. A cyber

ADVISORY: Insider Threat Competency Resource Guide · 2017-08-30 · UNCLASSIFIED Insider Threat CRG 4 UNCLASSIFIED 4. Execute insider threat awareness training requirements: Insider

Insider Threat and Security Clearance Reform · Insider Threat and Security Clearance Reform Goal Leaders: ... • Conducted scenario-based training course for Insider Threat program

Insider Threat Study: Illicit Cyber Activity Involving Fraud in the … · 2015-03-24 · Insider Threat Study: Illicit Cyber Activity Involving Fraud in the U.S. Financial Services

Army Cyber Institute at West Point PRESENTS: Insider ThreatAn insider threat is a malicious threat to an organization that comes from people within the organization, such as employees,

Forcepoint Insider Threat · Forcepoint Insider Threat Empowers Your Organization Forcepoint Insider Threat saves you time and effort by automatically scoring and prioritizing your

Hacker Halted 2014 - The Lethal Cyber Threat – The Insider

INSIDER THREAT DEFENSE Threat Defense-Insider... · INSIDER THREAT DEFENSE Security Behind The Firewall Is Our Business Table of Contents Page The Insider Threat - How Vulnerable

Insider Threat in IT

Developing Your Insider Threat Program: Insider Threat Best Practices

INSIDER THREAT - Optiv · Insider Threat Defined While insider threat has been defined in many different ways, Optiv defines insider threat as: “An insider threat is an employee,

Cyber, Physical or Insider Threat? - ASIS Europe 2018 · Cyber, Physical or Insider Threat? ... navigating a complex risk landscape? physical threat cyber threat insider threat

The Insider Threat

Cisco Cyber Threat Defense: Detecting and Protecting Against Insider Threat

LEGAL HURDLES TO INSIDER THREAT INFORMATION SHARING€¦ · a National Insider Threat Task Force (NITTF), required that agencies implement insider threat detection and prevention

Threat Visibility for Cyber Hunters - Kite Distribution · WHITE PAPER Threat Visibility for Cyber Hunters 3 Introduction The challenge of hunting bad actors, insider threats, and

INSIDER THREAT BUYERS GUIDE...BUYERS GUIDE Detect, Investigate, & Respond 2 THE RISK: INSIDER THREAT Insider threat is the fastest growing risk your organization faces, with insider

CYBERSECURITY - SIFMA€¦ · the insider threat at financial institutions; and (3) to help financial firms measure their insider threat program’s effectiveness. The Insider Threat

Insider Threat