The insider threat

February 2019 Asset Management, EAS, RFID, Integrated Solutions, Logistics (Industry)

Sitting in your office doing what you are doing as a C-suite gate-keeper or other senior management role, you proceed with your to-do things daily, as you should. You are doing exactly what you are supposed to be doing and what you are paid for. Or are you?

Talking about risk we understand that threats to our work environment come in different guises such as physical attacks to the business that include robbery or business break-ins or theft. Other threats present themselves in the form of cyber-attacks and IP theft (industrial espionage).

Andre Du Venage.
Andre Du Venage.

Considering logistics and warehousing operations, normally these threats are viewed from an outside-in perspective and most security is concentrated on keeping outsiders outside and away from goods manufactured or goods stored/ kept in warehouses. The security focus typically involves physical measures that include a good perimeter, security protection, armed response, access controls, visitors’ policy, vehicle tracking and monitoring, staff controls and standard operating procedures. This should be standard practise and the bare minimum for operations.

But when we talk insider threat, the question arises as to what do we do to keep the insider threat at bay. Insider refers to the staff member (permanent or contract) colluding in some way with outsiders to steal from the operation, normally in bulk, to effect a substantial loss. Insiders can also collude with other insiders to engage in criminal acts to hurt the company in different ways.

More questions that arise include:

• How do we keep the insider from colluding with other parties inside or outside?

• If the insider engages in illegal activity, how do I expose the person?

• Are there red flags to look out for?

• How do I handle the concern if red flags pop up?

Make a plan

The starting point to answer these operational questions lies with policies and procedures. An SOP on each business activity is essential not just for ensuring operations are taking place according to the sales plan, but also to the security risk plan. Does your company have a security risk plan? If not you need to start there and get staff aware that your business will defend against insider attack.

Having witnessed truck hijackings and bulk cargo theft first hand over many years, it came to mind that the attack will happen due to the fact that the system will be tested by criminals in their eagerness and greed to get their hands on other peoples’ property because it is an easy way to earn a living. The fact that it is not an honest living is of no consideration to most thieves.

What makes the difference in being repeatedly attacked is the response to the attack. If the response is weak, the attacks will continue. If the response is good and the attackers are apprehended or forced to leave the hijacked truck next to the road due to security counter-measures, then the attacks will dissipate.

The same principle applies to other operations in that if the attackers understand that once they attack, they themselves will become the target (of the security response) then they will think twice before trying that again. We need to act on insiders in a concise and effective way in order to create uncertainty and fear in the mind of the next person planning an attack.

Red flag alert

Insiders expose themselves by way of red flags popping up in operations that may start with absenteeism, right through to negligence or more open incidents of theft.

Insider threat manifests when company operations flow such that it opens doors to opportunity for crimes or outsiders are hired to infiltrate the organisation and go unnoticed. This article does not go into the motivations insiders have to commit theft, but often opportunity arrives by accident due to grey areas in the business operations.

It takes a concerted security risk management effort to identify and expose criminal insiders. The easier option would be to deter or deflect such opportunists and criminals from the operation by closing operational gaps and opportunities for crime. Each business must consider its own unique environment that includes product, staff make-up, policies and procedures.

The insider threat will always remain so the best approach is to identify the operational gaps that create opportunity, hire knowledgeable security staff and a strong security leader (with influence). The CEO/COO/MD should be the person the security leader reports to in most operations. The security manager needs to champion the security process and show progress and results, and this includes an active programme to also focus inside to the internal risks.

For more information, contact Andre Du Venage, Secure Logistics, +27 11 391 6268, andre@securelogistics.co.za



Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Circular economy offers cost savings
Issue 7 2020 , Asset Management, EAS, RFID
Circular economy initiatives help businesses keep technology assets in use for longer, extracting the maximum value from those electronics while in use.

Read more...
IoT is transforming the mobility space
Issue 7 2020 , Asset Management, EAS, RFID
Technology is no longer a grudge purchase, but an indispensable part of modern business, especially in the mobility and transport sector.

Read more...
The future of the VMS
CCTV Handbook 2020, Technews Publishing, Cathexis Technologies, Arteco Global, XtraVision , Editor's Choice, CCTV, Surveillance & Remote Monitoring, Integrated Solutions
Will AI-enhanced video analytic apps that can be downloaded and installed directly onto cameras take business away from the VMS market?

Read more...
No downtime for transport security
Issue 7 2020, Secure Logistics, Technews Publishing , Logistics (Industry)
After a brief downturn in crime due to the COVID-19 lockdown, the transport sector is once again at the centre of a crime spree.

Read more...
Reduce fleet challenges with video telematics
Issue 7 2020 , Asset Management, EAS, RFID
Using a video telematics system can take your fleet into a new domain of safety, efficiency, productivity and cost cutting.

Read more...
Argility showcases SkyData IoT Platform
Issue 6 2020 , Asset Management, EAS, RFID
SkyData, a device agnostic IoT cloud platform, is transforming asset and resource monitoring and management.

Read more...
The evolution of security in residential estates
Residential Estate Security Handbook 2020 , Editor's Choice, Integrated Solutions, Security Services & Risk Management
Two large estates discuss their security processes and the ever-expanding scope of responsibilities they need to fulfil.

Read more...
Home-grown, cloud-based safety and security solutions
Residential Estate Security Handbook 2020 , IT infrastructure, Integrated Solutions
BeSecure has taken security and communications technologies and turned them into what is best described as care and safety solutions for the estate community in South Africa.

Read more...
Integrated security management system
Residential Estate Security Handbook 2020, Protoclea Advanced Image Engineering , Products, CCTV, Surveillance & Remote Monitoring, Integrated Solutions
Phorcas is a security information system developed by Protoclea designed to integrate multiple sub-systems into a powerful crime fighting solution.

Read more...
IoT security seal
Issue 4 2020 , Asset Management, EAS, RFID
With the current lockdown and ports operating at reduced capacity, the need for automation has been taken to a new level.

Read more...