Understanding and managing insider threat
Insider Threat is an uncomfortable truth for many organisations, where a member of staff acts dishonestly, or within a criminal capacity.
The Cressey Triangle, a well-established model for identifying Fraudulent practices states that three things are often inherent in a member of staff committing Cyber Fraud; Motivation, Opportunity and Rationalisation.
Lockdown’s Insider Threat review and Consultancy utilise a combination of training, technology and professional services to provide monitoring and identify controls, which reduce the risk of Insider Threat. We uncover and review areas of the business, often routed within Finance and Procurement but not exclusively, where Cyber Fraud often manifests, to ensure appropriate controls are in place. Technology can be used to examine access and rogue digital behaviours, whilst Threat Intelligence monitoring can be used to identify breached data and its source.
These services can also be applied to the UK Governments Economic Crime & Corporate Transparency Act, to ensure compliance against a ‘failure to prevent fraud’.
- Combination of Professional Services Consultancy and Technology
- Consultancy and review of counter fraud controls
- Identity, user and data monitoring services
- Insider Risk and Fraud Training
- Format: consultancy, review, monitoring and training
- Duration: scoped engagement, with ongoing monitoring where required
- Audience: leadership, finance, procurement, HR, IT/security, risk and compliance
- Ideal for: organisations reviewing insider fraud exposure, internal controls or failure to prevent fraud obligations
- What's included: counter-fraud control review + monitoring options + risk findings + practical recommendations + training
Insider Threat Review and Consultancy
Common problems
“We’re worried about insider fraud.”
Explore problem →Recommended focus: identifying where insider risk exists
You’ll get: clearer risks and practical next steps“Finance or procurement could be exposed.”
Explore problem →Recommended focus: reviewing higher-risk processes
You’ll get: clearer controls around fraud risk“We don’t know where our internal controls are weak.”
Explore problem →Recommended focus: reviewing counter-fraud controls
You’ll get: gaps identified and controls strengthened“Sensitive data may have been exposed.”
Explore problem →Recommended focus: tracing breached or leaked data
You’ll get: greater insight into the potential source“We need to spot suspicious user activity.”
Explore problem →Recommended focus: monitoring users, access and data
You’ll get: better visibility of unusual behaviour“We need to review our fraud prevention controls.”
Explore problem →Recommended focus: assessing fraud risks and safeguards
You’ll get: clearer priorities for improvementWhat this service covers
- Consultancy and review of existing counter-fraud controls
- Identification of areas where insider fraud risk may exist across the organisation
- Review of higher-risk functions, including finance and procurement where relevant
- Identity, user and data monitoring options
- Technology-based monitoring for unusual or rogue digital behaviours
- Threat intelligence monitoring to identify breached or exposed data and investigate its potential source
- Recommendations for additional controls, processes and monitoring
- Insider risk and fraud training
- Review of relevant controls in the context of failure to prevent fraud requirements
Ask for price
Tell us what concerns you have, which areas of the business you would like reviewed, and whether you’re looking for consultancy, monitoring, training or a combination of services. If you’d like a call back, leave your phone number in the optional message field and we’ll get back to you. We’ll recommend the best-fit approach and send a clear quote.
