The following information was supplied to be forwarded to ASIS members:

 

NATIONAL INSIDER THREAT SPECIAL INTEREST GROUP

Insider Threat Symposium & Expo
The National Insider Threat Special Interest Group (NITSIG) would like to invite ASIS Members to the 2nd Annual NITSIG Insider Threat Symposium & Expo™ on July 18, 2017, at the Johns Hopkins University – Applied Physics Laboratory, in Laurel, Maryland. There is NO CHARGE to attend. More details and registration information below.

Is your company concerned with mitigating the threats from disgruntled and malicious employees who could cause serious damage to your company? Is your company considering implementing an Insider Threat Program? Then this is the event you don’t want to miss.
While Cyber Threats, Cyber Criminals and Data Breaches continue to grab the daily headlines, the sad reality is that “Employees / Insiders” are behind most data breaches. Regardless of whether it is a disgruntled or malicious employee out for revenge, or an employee who simply disregards and ignores an organizations security polices, or has received NO / POOR training for protecting the organizations assests, the damges can be very costly.

Numerous reports from the FBI and other organizations are showing that when employees leave their employers, regardless of the reason for their departure, they often take with them sensitive and confidential information, such as intellectual property or trade secrets, that belongs solely to their employer.
Numerous other reports are showing a total disregard for protecting sensitive business information and networks. A survey revealed that 27% of U.S. office workers at large companies would sell their network password to an outsider, compared to a global average of 20%. A survey of 1,000 employees in the United States and Europe found that 1 in 5 had uploaded sensitive and confidential corporate data to an external cloud service specifically for the purpose of sharing it with others.

Even further disturbing is that in some case Cyber Criminals are in collusion with Malicious Employees on the Dark Web, as reported by RedOwl and the Carnegie Mellon’s CERT Insider Threat Center.

Insider Threat Damages
The NITSIG has complied some “Eye Opening” reports, surveys and incidents that should be of concern to all CEO’s, Human Resources and security professionals. A NITSIG report titled ” Insider Threats Incidents – Could These Happen To Your Organization?” provides numerous real world examples of “Insider Threat Incidents”, showing ANY business large or small is susceptible to the insider threat problem.

Measurable Damage From Data Breaches
Businesses should pay close attention to a 2017 report that was released from Cisco concerning damages from data breaches. The report provides insights based on threat intelligence gathered by Cisco’s security experts, combined with input from nearly 3,000 Chief Security Officers (CSOs) and other security operations leaders from businesses in 13 countries.

According to the Cisco report, organizations that suffered a breach, the effect was substantial: 22% of breached organizations lost customers, 40% of them lost more than a fifth of their customer base, 29% lost revenue, with 38% of that group losing more than a fifth of their revenue, and 23% of breached organizations lost business opportunities, with 42% of them losing more than a fifth of such opportunities.

According to the Association of Certified Fraud Examiners 2014 Global Fraud Study, 30% of all business failures are caused by employee theft.

Insider Threat Symposium And Expo (ITSE) Overview
The Symposium will provide businesses and other organizations with expert advise on how to mitigate the growing “Insider Threat Problem”. Each of our speakers have “Hands On Experience” and are deeply involved in Insider Threat Risk Mitigation (Insider Threat Programs / Employee Threat Identification and Mitigation Programs) for the U.S. Government (DoD, IC), Defense Contractors and the private sector. Please see this link for speaker presentation descriptions:
http://www.nationalinsiderthreatsig.org/nitsig-insiderthreatsymposiumexpo.html
This event will be attend by security professionals and others working for; U.S. Government Agencies (Department of Defense, Intelligence Community), Defense Contractors, Critical Infrastructure Providers, Aviation / Airline Industry, Technology-Manufacturing Companies, Banking – Financial Industry, Health Care Industry, large and small businesses. If your looking to establish or enhance your Insider Threat Program, gain valuable knowledge, collaborate and share information related to Insider Threat Risk Mitigation, this is the event.
The Expo will provide attendees with visibility into proven technologies and services (Currently Used By The U.S. Government / Private Sector) for Insider Threat Detection, Mitigation and Prevention. If you want to see Employee User Activity Monitoring / Behavioral Analytical Tool demonstrations, this is the event.
More Info / Registration

http://www.nationalinsiderthreatsig.org/nitsig-insiderthreatsymposiumexpo.html


NITSIG Membership (FREE)
Interested in becoming a NITSIG Member? The NITSIG is the largest network of Insider Threat Risk Mitigation Security Professionals in the U.S., for the sharing and collaboration of information related to the “Insider Threat Problem”.
http://www.nationalinsiderthreatsig.org/nitsigmembership.html

If you have any additional questions about the NITSIG or ITSE please contact me.

Jim Henderson, CISSP, CCISO
Founder / Chairman Of The National Insider Threat Special Interest Group
Phone: 888-363-7241 / 561-809-6800
www.nationalinsiderthreatsig.org
jimhenderson@nationalinsiderthreatsig.org
www.insiderthreatdefense.us
www.nispomcc2training.com
www.employeethreatmitigation.com