Cyber Defense eMagazine February Edition for 2023

Insider Threats are a Primary Vulnerability of
Critical Infrastructure
By Jim Henderson, CISSP, CCISO CEO Insider Threat Defense Group, Inc.
Insider threats are a primary vulnerability of critical infrastructure, as they can potentially cause significant
damage to essential systems and facilities across various sectors. The 16 designated sectors of critical
infrastructure include Energy, Banking and Finance, Communications, Critical Manufacturing,
Emergency Services, Healthcare and Public Health, Dams, Defense Industrial Base, Drinking Water and
Wastewater Systems, Food and Agriculture, Government Facilities, Chemical, Commercial Facilities,
Information Technology, Nuclear Reactors, Materials, and Waste, and Transportation Systems. Any
malicious activity from an insider in these sectors can have severe consequences on the nation's security,
economy, and public well-being.
Insider threats can be broadly classified into four categories: malicious insiders, accidental insiders,
compromised insiders, and opportunistic insiders. Malicious insiders are individuals who intend to cause
harm to their organization, and are motivated by factors such as financial gain, revenge, or ideological
reasons. Accidental insiders are individuals who may not intend to cause harm, but through their actions
or negligence, can put critical systems and information at risk. Compromised insiders are individuals
whose access to critical systems and information has been compromised by a cyber attacker.
One of the main reasons why insider threats are so dangerous is because they often have legitimate
access to sensitive information and systems. This makes it much harder for organizations to detect and
Cyber Defense eMagazine – February 2023 Edition 117
Copyright © 2023, Cyber Defense Magazine. All rights reserved worldwide.