SEC URIT Y F E AT URE
Insider Threats
Beyond data and computer systems By Dr Lisa Warren, Clinical/ Forensic Psychologist and Founder of Code Black Threat
The world has changed. Cars are now being used as weapons, major incidents are broadcast almost live to air and mass shootings are reported with increasing frequency (Advanced Law Enforcement Rapid Response Training Centre, 2018). It feels like our need for security has never been higher. While our national security is aided by us being “alert, but not alarmed” (www.nationalsecurity.gov.au), subtle threats can still be difficult to detect, especially when they come from people that are meant to be trustworthy. Consider the following hypothetical example: “Max is in his 50’s and has worked in the security industry for over 30 years. He is well respected by many within the industry. Max views himself as role model to all junior staff, although has a reputation for taking special interest in promoting female security staff. The latest example is Melissa - young, energetic and wanting to impress. While she says she has enjoyed Max’s mentoring, Melissa recently disclosed to another senior staff 2 0 S EC U R I T Y I N S I D ER | JU N/ JU L 201 8
member that Max had begun texting her after hours, offering advice. She tried to laugh it off but was clearly uncomfortable. As the conversation progressed Melissa appeared conflicted and said she felt Max’s texts were becoming more personal and last night he said he was tired of life and his career, feeling burnt out, however, was inspired to keep going due to the energy she brought to the team”. An insider threat is traditionally defined as an employee, or former employee, who takes proprietary data for their own gain. There is benefit in challenging this definition to include the range of behaviours that threaten the work environment. Melissa’s case is an example of the threat emerging as subtle and ambiguous then
escalating. When not detected and contained early, staff like Max become an expensive, disruptive and damaging insider threat.
Aggression and Psychological Safety Sometimes called mind games, the problem behaviours of colleagues can distract, frustrate and distress even the most psychologically resilient. Mind games can be hard to describe, even when your instincts make it clear you’re being targeted. Sometimes mind games are very subtle and involve rudeness and inflexibility. Other times the behaviour is more overt and involves intimidation and explicit threats. As a forensic psychologist, I have worked with many people who
