A Program To Counter Insider Threats

Abstract: This talk proposes an organizational program to counter insider threats in which the underlying strategy is to balance access control and monitoring. Specific steps are to motivate management investment, establish a legal foundation, deliver near-term results, plan longer-term enterprise modernization, and counter malicious system administrators.