{"id":24492,"date":"2023-09-01T12:29:09","date_gmt":"2023-09-01T11:29:09","guid":{"rendered":"https:\/\/www.hawkins.biz\/?post_type=insight&p=24492"},"modified":"2025-07-30T09:02:52","modified_gmt":"2025-07-30T08:02:52","slug":"insider-threat-risk","status":"publish","type":"insight","link":"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/","title":{"rendered":"The Biggest Threat? The Insider Threat"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Insider threat<\/span><\/i> is a malicious threat to a company that stems from people who have legitimate access to company assets, such as current and former employees, as well as contractors and partners, in which they cause harm to the business, either intentionally or unintentionally. It can involve theft of information, fraudulent transactions, or sabotage of systems. The consequences for a company can be devastating, as it often leads to both reputational damage and regulatory fines. Digital Forensics plays a key role in identifying who was involved in an insider threat matter, and how it occurred. Through analysis of digital devices and data, as well as user\u2019s digital footprint, a Digital Forensic investigator can establish the root cause, subsequent events and their consequences.<\/span>\u00a0<\/span><\/p>

According to Ponemon Institute\u2019s 2020 Cost of Insider Threats study, between 2018 and 2020 insider threats increased by 47% and the cost to companies rose by 31%. It was also found that if an insider threat took more than 90 days to contain, as opposed to under 30 days, there was a 92.6% increase in annual costs to companies. Such statistics demonstrate how insider threat is becoming the biggest threat to companies, and how there is an increasing need for businesses to become more aware of what it involves, and how to appropriately manage it.<\/span>\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Who is Involved?<\/span><\/span>\u00a0<\/span><\/span><\/h4>

The three types of person to commit insider threat are:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t
  • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tNegligent insider \u2013 a current or former employee, as well as a contractor or partner, who unintentionally causes damage to a company by making a mistake, or being the victim of a phishing scam, or social engineering.\u00a0<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
  • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tMalicious insider \u2013 a departing or disgruntled employee who intentionally causes damage to a company for their own personal gain.\u00a0<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
  • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tInfiltrator \u2013 an external perpetrator, referred to as a credential thief, who targets an insider\u2019s username and password in order to gain unauthorised access to a company\u2019s computer systems.\u00a0<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    What Data is Taken?\u00a0<\/span><\/h4>

    The preparator\u2019s motives and intentions normally determines what data they take from their company. However, there are very common themes when it comes to insider threat in which the most common types of data to be taken are:<\/span>\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
      \n\t\t\t\t\t\t\t
    • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tIntellectual property <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
    • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tCRM databases <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
    • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tBusiness plans <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
    • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tFinancial records <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
    • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tPrivate employee records <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
    • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tUsernames and passwords <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      Where Does it Occur?<\/span><\/span><\/h4>

      Insider threat is not something which can only occur whilst the perpetrator is in the company\u2019s premises, it can also occur remotely, such as at the perpetrator\u2019s home.<\/span>\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t
      \n\t\t\t\t\t\t\t
        \n\t\t\t\t\t\t\t
      • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tOffice \u2013 as the perpetrator has physical access to the company\u2019s premises, they can circumvent certain security controls, allowing them more in-depth access to resources which are not accessible remotely. <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
      • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tHome \u2013 as the perpetrator is not surrounded by colleagues, or security measures such as CCTV, they have more freedom in their own surroundings to conduct insider threat. Given that the majority of companies now allow their employees to work from home, it could become more common for perpetrators to conduct their actions remotely, away from the office. <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t\t\t\t\t

        When Does it Occur?<\/span><\/span>\u00a0<\/span><\/span><\/h4>

        T<\/span>here is no set <\/span>time frame<\/span> for when insider threat can occur, with various instances taking place inside and outside of office hours, including weekends.<\/span><\/span>\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

        \n\t\t\t\t
        \n\t\t\t\t\t\t\t
          \n\t\t\t\t\t\t\t
        • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tInside working hours \u2013 a perpetrator can be seen by their colleagues to be going about their normal work day and schedule, however, unknown to them, the perpetrator is conducting malicious actions whilst no one is watching them. Also, conducting their actions during working hours makes preparators think they are being more discreet, as opposed to working earlier or later in the day or week. <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
        • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tOutside of working hours \u2013 a perpetrator may think it is easier to conduct their malicious actions whilst no one else is working, whether they are in the office or at home, as they believe they are not being monitored. This sense of freedom adds to the perpetrator\u2019s confidence. <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t\t\t\t\t

          How Does it Occur?<\/span><\/span>\u00a0<\/span><\/span><\/h4>

          Similar to<\/span> why insider threats occur, there are many ways in which it occurs, <\/span>such as one or more of the following:<\/span><\/span>\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

          \n\t\t\t\t
          \n\t\t\t\t\t\t\t
            \n\t\t\t\t\t\t\t
          • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tExternal USB storage device \u2013 a perpetrator can connect a personal USB storage device to their company computer and copy or move company data to it so that they then have their own personal copy. <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
          • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tCloud storage system \u2013 a perpetrator can sign into their personal cloud storage account to copy or move company data to it so that they then have their own personal copy. <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
          • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tCommunication application \u2013 a perpetrator can sign into their personal communication account, such as their email or WhatsApp account, to copy company data to it so that they then have their own personal copy. <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
          • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tPhotographs \u2013 a perpetrator can take photographs of the company data using their personal mobile phone so that they then have their own personal copy. <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
          • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tPrinting \u2013 a perpetrator can print off company data using a printer so that they then have their own personal copy. <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
            \n\t\t\t\t
            \n\t\t\t\t\t\t\t\t\t

            Consequences<\/span><\/span>\u00a0<\/span><\/span><\/h4>

            There are various consequences of insider threat with each of them having their own severity of impact. In some cases, companies have failed to recover from the aftermath of an insider threat and <\/span>subsequently<\/span> ceased to exist. However, more commonly, the following consequences will occur:<\/span><\/span>\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

            \n\t\t\t\t
            \n\t\t\t\t\t\t\t
              \n\t\t\t\t\t\t\t
            • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tLoss of intellectual property <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
            • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tLoss of client trust <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
            • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tReputational damage <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
            • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tRegulatory fines <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
              \n\t\t\t\t
              \n\t\t\t\t\t\t\t\t\t

              Preventative Measures<\/span><\/span>\u00a0<\/span><\/span><\/h4>

              There are a few measures which can be put in place by a company to <\/span>prepare, prevent or manage <\/span>insider threat, such as:<\/span><\/span>\u00a0<\/span> <\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

              \n\t\t\t\t
              \n\t\t\t\t\t\t\t
                \n\t\t\t\t\t\t\t
              • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tPolicies and procedures i.e. Acceptable Use Policy (AUP) <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
              • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tAppropriate access rights for each employee i.e. principle of least privilege <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
              • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tEncryption of systems, devices and data <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
              • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tAntivirus and antispyware software <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
              • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tData loss prevention (DLP) software <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
              • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tRestricted USB port access <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
              • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tUse of a virtual private network (VPN) <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
              • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tEmployee training <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
              • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tForensic readiness plan <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
                \n\t\t\t\t\t\t
                \n\t\t\t\t\t
                \n\t\t\t
                \n\t\t\t\t\t\t
                \n\t\t\t\t
                \n\t\t\t\t\t\t\t
                \n\t\t\t
                <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

                The article delves into the escalating threat of insider breaches, wherein individuals with legitimate access to a company’s resources intentionally or inadvertently cause harm. <\/p>\n","protected":false},"featured_media":24541,"parent":0,"template":"","insight_category":[],"experties":[64],"class_list":["post-24492","insight","type-insight","status-publish","has-post-thumbnail","hentry","experties-cyber-digital-technology"],"acf":[],"yoast_head":"\nInsider Threats: The Hidden Risk in Organizations<\/title>\n<meta name=\"description\" content=\"Explore how insider threats pose significant risks to organizations, and how forensic investigations uncover internal vulnerabilities.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Insider Threats: The Hidden Risk in Organizations\" \/>\n<meta property=\"og:description\" content=\"Explore how insider threats pose significant risks to organizations, and how forensic investigations uncover internal vulnerabilities.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/\" \/>\n<meta property=\"og:site_name\" content=\"Hawkins Forensic Investigation\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-30T08:02:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.hawkins.biz\/wp-content\/uploads\/2023\/09\/Insider-Threat-640x480-1.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"640\" \/>\n\t<meta property=\"og:image:height\" content=\"479\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/\",\"url\":\"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/\",\"name\":\"Insider Threats: The Hidden Risk in Organizations\",\"isPartOf\":{\"@id\":\"https:\/\/www.hawkins.biz\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.hawkins.biz\/wp-content\/uploads\/2023\/09\/Insider-Threat-640x480-1.jpeg\",\"datePublished\":\"2023-09-01T11:29:09+00:00\",\"dateModified\":\"2025-07-30T08:02:52+00:00\",\"description\":\"Explore how insider threats pose significant risks to organizations, and how forensic investigations uncover internal vulnerabilities.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/#primaryimage\",\"url\":\"https:\/\/www.hawkins.biz\/wp-content\/uploads\/2023\/09\/Insider-Threat-640x480-1.jpeg\",\"contentUrl\":\"https:\/\/www.hawkins.biz\/wp-content\/uploads\/2023\/09\/Insider-Threat-640x480-1.jpeg\",\"width\":640,\"height\":479,\"caption\":\"Corporate security manager identifies a potential insider threat in a line-up of eight white collar workers. Hacker or spy icon lights up purple. Cybersecurity and human resources challenge concept.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.hawkins.biz\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Insights\",\"item\":\"https:\/\/www.hawkins.biz\/insight\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"The Biggest Threat? The Insider Threat\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.hawkins.biz\/#website\",\"url\":\"https:\/\/www.hawkins.biz\/\",\"name\":\"Hawkins Forensic Investigation\",\"description\":\"Specialising in Forensic Investigation\",\"publisher\":{\"@id\":\"https:\/\/www.hawkins.biz\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.hawkins.biz\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.hawkins.biz\/#organization\",\"name\":\"Hawkins and Associates\",\"url\":\"https:\/\/www.hawkins.biz\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.hawkins.biz\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.hawkins.biz\/wp-content\/uploads\/2022\/03\/logo_svg.svg\",\"contentUrl\":\"https:\/\/www.hawkins.biz\/wp-content\/uploads\/2022\/03\/logo_svg.svg\",\"width\":164,\"height\":61,\"caption\":\"Hawkins and Associates\"},\"image\":{\"@id\":\"https:\/\/www.hawkins.biz\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/hawkins-and-associates-limited\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Insider Threats: The Hidden Risk in Organizations","description":"Explore how insider threats pose significant risks to organizations, and how forensic investigations uncover internal vulnerabilities.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/","og_locale":"en_GB","og_type":"article","og_title":"Insider Threats: The Hidden Risk in Organizations","og_description":"Explore how insider threats pose significant risks to organizations, and how forensic investigations uncover internal vulnerabilities.","og_url":"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/","og_site_name":"Hawkins Forensic Investigation","article_modified_time":"2025-07-30T08:02:52+00:00","og_image":[{"width":640,"height":479,"url":"https:\/\/www.hawkins.biz\/wp-content\/uploads\/2023\/09\/Insider-Threat-640x480-1.jpeg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/","url":"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/","name":"Insider Threats: The Hidden Risk in Organizations","isPartOf":{"@id":"https:\/\/www.hawkins.biz\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/#primaryimage"},"image":{"@id":"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/#primaryimage"},"thumbnailUrl":"https:\/\/www.hawkins.biz\/wp-content\/uploads\/2023\/09\/Insider-Threat-640x480-1.jpeg","datePublished":"2023-09-01T11:29:09+00:00","dateModified":"2025-07-30T08:02:52+00:00","description":"Explore how insider threats pose significant risks to organizations, and how forensic investigations uncover internal vulnerabilities.","breadcrumb":{"@id":"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/#primaryimage","url":"https:\/\/www.hawkins.biz\/wp-content\/uploads\/2023\/09\/Insider-Threat-640x480-1.jpeg","contentUrl":"https:\/\/www.hawkins.biz\/wp-content\/uploads\/2023\/09\/Insider-Threat-640x480-1.jpeg","width":640,"height":479,"caption":"Corporate security manager identifies a potential insider threat in a line-up of eight white collar workers. Hacker or spy icon lights up purple. Cybersecurity and human resources challenge concept."},{"@type":"BreadcrumbList","@id":"https:\/\/www.hawkins.biz\/insight\/insider-threat-risk\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.hawkins.biz\/"},{"@type":"ListItem","position":2,"name":"Insights","item":"https:\/\/www.hawkins.biz\/insight\/"},{"@type":"ListItem","position":3,"name":"The Biggest Threat? The Insider Threat"}]},{"@type":"WebSite","@id":"https:\/\/www.hawkins.biz\/#website","url":"https:\/\/www.hawkins.biz\/","name":"Hawkins Forensic Investigation","description":"Specialising in Forensic Investigation","publisher":{"@id":"https:\/\/www.hawkins.biz\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.hawkins.biz\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.hawkins.biz\/#organization","name":"Hawkins and Associates","url":"https:\/\/www.hawkins.biz\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.hawkins.biz\/#\/schema\/logo\/image\/","url":"https:\/\/www.hawkins.biz\/wp-content\/uploads\/2022\/03\/logo_svg.svg","contentUrl":"https:\/\/www.hawkins.biz\/wp-content\/uploads\/2022\/03\/logo_svg.svg","width":164,"height":61,"caption":"Hawkins and Associates"},"image":{"@id":"https:\/\/www.hawkins.biz\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/hawkins-and-associates-limited\/"]}]}},"_links":{"self":[{"href":"https:\/\/www.hawkins.biz\/wp-json\/wp\/v2\/insight\/24492","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hawkins.biz\/wp-json\/wp\/v2\/insight"}],"about":[{"href":"https:\/\/www.hawkins.biz\/wp-json\/wp\/v2\/types\/insight"}],"version-history":[{"count":33,"href":"https:\/\/www.hawkins.biz\/wp-json\/wp\/v2\/insight\/24492\/revisions"}],"predecessor-version":[{"id":40500,"href":"https:\/\/www.hawkins.biz\/wp-json\/wp\/v2\/insight\/24492\/revisions\/40500"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.hawkins.biz\/wp-json\/wp\/v2\/media\/24541"}],"wp:attachment":[{"href":"https:\/\/www.hawkins.biz\/wp-json\/wp\/v2\/media?parent=24492"}],"wp:term":[{"taxonomy":"insight_category","embeddable":true,"href":"https:\/\/www.hawkins.biz\/wp-json\/wp\/v2\/insight_category?post=24492"},{"taxonomy":"experties","embeddable":true,"href":"https:\/\/www.hawkins.biz\/wp-json\/wp\/v2\/experties?post=24492"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}