KnowledgeArticles
Analysis of insider risk and information protection practice.
Models as Insiders: Whose Authority, and Whose Data
Satya Nadella’s seven principles for models raise questions that insider risk programs also have to answer about people: on whose authority an agent acts, and whose data its record holds.
Insider Risk KPIs: What the Numbers Reward
The key performance indicators of an insider risk management program are usually the figures at hand rather than the ones that inform a decision, and several of them, used alone as targets, can reward the conduct the program exists to prevent.
Data Classification and Behavioral Monitoring: Choosing the Starting Point
You deploy in an order. You run in a loop.
What Holds an Insider Program Together
Four records plus one, and why European requirements make them hard to postpone.
From Insider Alerts to Supported Findings
The depth that clears a person is the depth that builds a case against one.
The Competencies an Insider Risk Team Needs
Breadth alone does not establish competence: a core of investigative judgment, translated for the specialists who share the work.
Detecting Sensitive Information Beyond Fixed Patterns
Some sensitive information has recognizable patterns; other material depends on meaning and business context.
Insider Threat or Insider Risk?
The word you choose builds the program you get.
Agents Execute. They Don’t Command.
Tactical autonomy is real. Command autonomy is not arriving with it.