Insider Risk

Distinctive insight and expertise in responding to the complex nature of cyber-enabled and other insider activity and shaping integrated organisational and technical measures to provide appropriate defences for business and public sector organisations.

Harm arising from insider events is increasing in severity. Organisations’ ability to identify the risks and threats posed by insiders, including suppliers and partners, is an essential first step in preventing, mitigating and managing potential harms arising from internal acts of carelessness or malice.

GSA Global’s experts support the development of organisational and cyber/technical defences. We provide a range of strategic and tactical approaches including maturity assessments and insider operating models bespoke to the risk profile of individual organisations having considered governance and policy, staff selection, training, threat intelligence, incident management and reviews, and technical solutions’ integration and optimisation.

Insider Risk Management Strategy

GSA Global has distinctive insight and expertise in understanding the complex nature of insider threats and shaping integrated organisational and technical measures to provide an appropriate level of defence for business and public sector organisations.

GSA Global has exceptional understanding of the interactions between insider and cyber and physical threats – including the risks presented by insiders operating within critical third party (CTP) suppliers, counterparties and other business partners.

GSA Global provides informed threat insider assessments that help businesses and other organisations understand and respond appropriately to insider and insider-enabled threats within their own organisations and in CTPs.

GSA Global undertakes assessments of organisations’ insider risk defences and their vulnerability to attack, works with boards and top management to agree on an appropriate appetite for insider risk, integrated organisational and technical strategy and security operating models to deliver an acceptable risk exposure. Our expertise in this regard includes understanding how best to use emerging technologies alongside expertise for all aspects of organisation design, including the tools that can be used to reduce insider risk such as whistleblowing arrangements.

Investigation & Crisis Management

GSA Global brings to bear exceptional human, User and Entity Behaviour Analytics (UEBA) technical, financial and physical investigative capabilities that enable our clients to understand and appropriately respond to the most complex and damaging insider incidents. Our deep experience in crisis management and in handling serious crime and nation state attacks, together with established working relationships with lawyers, regulators, government law enforcement and other agencies enables us to provide robust and pragmatic advice on how best to handle troubling insider incidents.

Our expertise includes technical, cyber and financial forensics, as well as experience in gathering and handling a wide range of other evidence. Our experience in providing evidence creates civil, criminal, legal and regulatory options for dealing with insiders.

Technical Solutions

GSA Global has extensive experience in handling advanced techniques including the use of ‘truth or deception’ technologies during investigations.

GSA Global also has UEBA system design and implementation experience that enables our clients to choose appropriate behavioural monitoring solutions, implement and integrate them with other security technologies and get the best value from them.

Managed Services

GSA Global provides an extensive range of vetting services including international identity and criminal record checks, the verification of academic and other documentation, credit and insolvency, directorship and sanctions checks. These services can cover employees, contractors and (with appropriate agreement) staff in critical third parties.

Other managed services include dark web checks for material related to key staff and continuing monitoring of dark web and other vetting data sources for these sensitive staff. We also provide agreed and ethical monitoring of key staff employed by critical third parties.