CISO Tradecraft® #208 - Insider Threat (with Shawnee Delaney)
22 snips
Nov 25, 2024 Shawnee Delaney, an insider threat expert with a background in espionage, shares her insights into cybersecurity's human elements. She highlights how understanding motivation is vital for detecting insider threats and stresses the importance of cultivating a positive organizational culture. Delaney discusses proactive strategies like psychological testing in hiring and employee lifecycle management. She also offers practical advice for leaders to foster open communication and build effective insider threat programs, drawing parallels from military core values.
AI Snips
Chapters
Transcript
Episode notes
Espionage to Cybersecurity
- Shawnee Delaney began her career in espionage, recruiting spies.
- She transitioned to cybersecurity after realizing the similar tactics used by threat actors.
Vulnerability and Exploitation
- Everyone has vulnerabilities at some point in their lives.
- Threat actors exploit these vulnerabilities, especially during personal rock bottom.
Sudden Spending Spree
- An employee's sudden change in spending habits, like buying a new car and phone, alerted coworkers.
- This change revealed an insider threat involving data manipulation for fraud.