Abstract for: A System Dynamics Model for Investigating Early Detection of Insider Threat Risk
In many organizations, the responsibility for managing the insider threat falls almost exclusively with the information technology staff. But many of the early indications of problems occur at a behavioral, nontechnical level. This paper describes a system dynamics model for investigating how monitoring the behavioral indicators of insider threat risk can reduce the overall risk of a cybersecurity breach within an organization by promoting early detection. We show how the model could be used for a given set of input data, derived from our insider threat case database, and discuss future work to identify more robust inputs through interaction with partnering organizations.