Insider threat risk management for trade secrets and intellectual property

摘要

The importance of information security is widely acknowledged. Corporations invest significantly in firewalls, intrusion detection systems, network administration resources, and other security measures. Recent Denial of Service attacks, high profile network hackings, viruses, and other internet based vulnerabilities have lead to a myopic focus on technology oriented information security risks. Intellectual Property (IP) driven corporations that serve the electronic circuit assembly trade must look beyond network security to more actively consider how people handle their information assets. The best technology on the market is worthless if employees don't recognize the importance of the company's information assets and participate in the security process. Roughly 75% of the risk to IP can be linked to internal adversaries, including malicious and inadvertent compromises. This paper and presentation provide managers with tools to expand the internal dialog regarding threats to IP and how these risks can be managed in a manner that better reflects true vulnerabilities and actual adversaries.