METHODS FOR REDUCING AUTHORITY IN THE FIELD OF INFORMATION SECURITY: A LOOK AT THE INSIDER THREAT

Strizhkov Vladislav Alexandrovich

The article presents an assessment of existing insider mitigation methods used to mitigate the effects of insider attacks. Although both motive and opportunity are necessary to commit a crime, this article focuses on the concept of opportunity. Opportunity is more tangible than motive, hence it is more pragmatic to think about measures to reduce opportunities. For this purpose, theories of possibilities from the field of criminology are considered. The assessment offers several areas of study and can help organizations implement information security controls that reduce the opportunity for insiders. The evaluation is not final, but serves to inform future understanding

Keywords:information security, insider, internal intruder, reduction of authority, insider threat reduction