Insider threat is a growing area of concern and confusion among security practitioners. Typically accustomed to concentrating their resources on combating external threats, many security teams are eager yet unsure of how to combat threats that arise internally. This uncertainty, unfortunately, is often exacerbated by numerous common myths and misconceptions about insider threat, some of which include:

Insider Threats are Always Intentional and Harmful

Much of the confusion around insider threat starts with its definition. Factors ranging from fear to hype to inaccurate reporting have given rise to the widespread perception that the most malicious and damaging types of insider attacks—such as those involving corporate espionage, for example—are representative of all insider threats.