In 2022 BGS provided an overarching security programme for one of the wealthiest and most high-profile families in the Middle East.
The $6.3bn Binance cyber-heist highlights how insider risk, cyber security and nation-state threats increasingly overlap, reinforcing the need for integrated security strategies.
Colleagues, line managers and HR are often well placed to notice a developing insider problem early. Insider threat training exists to make that more likely: helping people recognise what matters, know what to do about it, and trust the routes for reporting it. GSA designs and delivers insider risk awareness and training for every level … Insider Risk Awareness, Culture and Training
The UK Government’s proposed whistleblowing reforms raise important questions about how organisations respond to concerns. We explore the implications for insider risk, corporate investigations and board accountability, and why effective whistleblowing arrangements go beyond simply having a policy in place.
When an organisation suspects an insider incident, such as data theft, misuse of information, unauthorised access or the possibility that a trusted individual has been compromised, it needs the facts established quickly, discreetly and independently. GSA investigates suspected insider incidents, drawing on the experienced investigators and open-source intelligence capability of GSA Investigation Services, within the … Insider Threat Investigations and Response
As cyber, insider and physical threats become more complex, organisations must rethink their crisis management arrangements. Explore the importance of realistic planning, operational resilience, effective exercising and board oversight.
13% of UK employees surveyed had either sold company login details to a former colleague or knew someone who had. What credential sharing reveals about workplace culture and the growing challenge of insider risk.
Insider threat detection gives an organisation the ability to identify risky activity involving trusted access, but only if the capability is designed around the risks that matter to that organisation. GSA provides independent advice on insider threat detection and monitoring: defining what the organisation needs to detect, designing the use cases, and evaluating or improving … Insider Risk Monitoring and Detection
An insider risk management programme is the structure that turns separate controls, such as vetting, monitoring, HR processes and investigation arrangements, into something that manages risk coherently. GSA designs, builds and improves insider risk programmes from the governance level down, and advises boards on how insider risk should sit within wider enterprise risk management. Building … Insider Risk Programme and Governance
An insider threat assessment establishes what an organisation is actually exposed to; a maturity review establishes how well current arrangements address that exposure and what to prioritise. Unless the real threats are understood, neither the risk nor the appropriate response can be judged properly, which is why assessment is the natural starting point for most … Insider Risk Assessment and Diagnostics
Security vetting provides valuable assurance at the point of recruitment, but trust is not static. Discover why ongoing personnel security, change-of-circumstances reviews and insider risk management are essential to protecting people, sensitive information and organisational resilience.
The latest NCSC advisory may focus on poorly configured routers, but the campaign behind it is far broader. Mark Raeburn explains why organisations must manage cyber, physical, personnel and supplier risk as one connected threat.
Insider threats come in many forms, from inadvertent actions to deliberate compromise, creating a complex and often overlooked risk for organisations.