Protecting Your Organization from the Inside Out

September marks National Insider Threat Awareness Month (NITAM), a dedicated time to raise awareness about the risks posed by insider threats—those that originate from within an organization. According to the 2023 Verizon Data Breach Investigations Report (DBIR), insider threats account for roughly 22% of all security incidents. This includes both malicious insiders (those with harmful intent) and inadvertent insiders (employees who make errors that lead to breaches).

The NITAM theme for 2024 is “Deter. Detect. Mitigate.”

Here’s how businesses can take action:

Deter: Build a Culture of Security

Foster a culture that prioritizes cybersecurity. Regular training sessions, clear policies, and a zero-tolerance stance on suspicious activity help employees understand their role in safeguarding company information. Educate staff on the importance of protecting sensitive data, recognizing phishing attempts, and reporting suspicious behavior. When employees are aware of the risks and their responsibilities, they become proactive in preventing insider threats.

Detect: Monitor for Anomalous Activity

Deploy robust monitoring tools to identify unusual behavior patterns that could indicate insider threats. This might include tracking access to sensitive information, monitoring email traffic for signs of data exfiltration, or using AI-based tools to detect anomalies. Regular audits of user access privileges and the timely review of alerts help ensure that potential threats are detected before they escalate.

The 2022 Ponemon Institute report on the “Cost of Insider Threats” indicates that it takes an average of 85 days to contain an insider threat incident. The longer the threat goes undetected, the higher the costs and damage to the organization.

Mitigate: Establish Incident Response Protocols

Prepare for insider threats by developing and maintaining a strong incident response plan. Clearly define roles and responsibilities, set up procedures for containing and investigating incidents, and conduct regular drills to test the plan’s effectiveness. A swift and coordinated response can significantly reduce the damage caused by an insider incident.

The 2022 Ponemon Institute report on the “Cost of Insider Threats” found that the average annual cost of insider threats for organizations is approximately $15.4 million. The average cost of a single incident caused by a negligent insider is around $307,000, while incidents involving malicious insiders can cost over $755,000 per incident.

Statistics Specific to the Manufacturing Industry:

Insider threats remain a significant concern across all sectors, but certain industries, like manufacturing, face unique challenges due to their reliance on intellectual property, supply chains, and critical infrastructure.

Impact on Manufacturing: According to a 2023 study by the Cybersecurity & Infrastructure Security Agency (CISA), the manufacturing sector ranked among the top three industries most targeted by insider threats. This is due to the high value of trade secrets, proprietary technology, and intellectual property unique to the industry.
Risks from Contractors and Third Parties: Manufacturing businesses often rely heavily on third-party vendors and contractors who may have access to sensitive information or critical systems. A report by Deloitte in 2023 highlighted that 60% of insider threat incidents in manufacturing involve external parties such as contractors or vendors, posing additional risk to the supply chain and operations.
Rise in Insider Threats During Digital Transformation: As the manufacturing sector increasingly adopts Industry 4.0 technologies—such as IoT, AI, and smart manufacturing systems—the risk of insider threats has grown. A 2022 Forrester report noted that 34% of manufacturing companies reported an increase in insider incidents over the past two years, largely due to increased digitalization and remote work arrangements.
Data Theft and Sabotage: According to the 2023 IBM X-Force Threat Intelligence Index, data theft (45%) and sabotage (30%) are the most common types of insider threats facing manufacturers. Data theft often involves sensitive intellectual property, while sabotage can disrupt production lines, damage equipment, or cause financial losses.

These statistics underscore the importance of insider threat programs, especially for manufacturing businesses, which are increasingly vulnerable to these types of threats.

Forthright Can Help!

Managing insider threats can be complex, but Forthright, as a trusted cybersecurity and managed services provider, has the expertise to help you deter, detect, and mitigate these threats. Set up a quick discovery call with us to learn how our tailored solutions can strengthen your organization’s defenses from the inside out.

More About NITAM:

First held in 2019, NITAM is an annual, month-long campaign that unites thousands of U.S. security professionals and policymakers from government and industry across 25 countries. The goal is to educate organizations about the risks of insider threats and highlight the importance of insider threat programs.

The Under Secretary of Defense for Intelligence & Security (USD(I&S)), the National Insider Threat Task Force, and the Defense Counterintelligence and Security Agency (DCSA) lead this initiative in partnership with other stakeholders. Together, they aim to build on previous successes, expand the campaign’s impact, and reach a broader audience each year. Organizations participating in NITAM actively promote awareness and encourage reporting of insider threats across their workforces.

Learn more at https://securityawareness.usalearning.gov/cdse/nitam/index.html