A New Approach to Move from Threats to Risks

The main change that must occur in the organization to move from threat to risk is to start looking for new signals that indicate potential problems. This requires a different timeline and there is a transition period required to build up a benchmark where risks can be compared.

With analytics in place, companies can start to understand two things: First, the “ new normal” rhythms of employees working wherever they are, and second, obvious areas where security can be improved. Then over time, more issues can be identified. 

There are three basic phases to implementing risk management

Phase One – Creating a “New Normal” Baseline: Companies implement monitoring software and start measuring activity such as who accesses sensitive information, positive and negative tones of communication, schedules, and idle time. With this information, it’s possible to create a baseline understanding of normal activity. Some people at home might keep odd hours for a good reason, perhaps because they have small children and take time off in the afternoon, but then get back to work after dinner. With analytics software in place, it’s possible to start understanding those schedules more effectively.

Read more @ https://hrtechcube.com/difference-between-insider-risk-and-insider-threat/