Abstract for: Insider Threat Dynamics: the dangerous triangle of pressure, rationalization and opportunity (Best Poster Award Winner)
It is known that cybersecurity costs and investments in security capabilities are going to increase over time. This makes an insider a very interesting target for threat actors because the insider has passed the boundary controls of the organisation. This also makes insider threat a concern for the defender. My research in this paper explains the structure underlying the feared and preferred behaviour related to the number of insider threat cases over time and takes into account the factors of pressure, rationalization and opportunity. The presence of this triad may evoke fraudulent behaviour by insiders. Although many controls are known, my research suggests more focus on ethics will contribute to the reduction of this threat. These controls include, amongst others, belief controls, tone at the top, ethical training, and speaking up. Limited studies consider pre-employment screening as well as appraisal and evaluation of employees as these controls may contribute to insider threat reduction as well. Relevant development for future research are the term insider will having a broader scope and certain malicious activities happening without criminal intent.