Survey: Insider Threats Surge Across U.S. Critical Infrastructure

Survey: Insider Threats Surge Across U.S. Critical Infrastructure

Over three-quarters (77%) of organizations across US critical national infrastructure (CNI) have seen a rise in insider-driven cyber threats in the last three years, according to new research by leading cyber security services firm Bridewell. The threat from within ranges from criminal intent to individual negligence, but those surveyed said an act of intentional destruction at the hands of an employee was committed on average at least every other week within the last year.

Bridewell’s findings come amidst a growing international focus on insider-driven cyber threats against critical infrastructure. The recent US Pentagon data leak, which saw a junior employee leak highly sensitive information, highlights the increased importance of strong insider threat controls and broader operational security.

The ‘Cyber Security in CNI: 2023’ research report, which surveyed 525 cyber security decision makers in the US, in the transport and aviation, utilities, finance, government, and communications sectors, reveals that increased insider threat could also be linked to increased geopolitical tension and the current economic pressures felt by individuals, with over a third (35%) of critical infrastructure organizations reported a rise in the number of internal employees turning to cyber crime due to poor economic conditions.

At the same time, the worry around cyberwarfare right now also remains high, with 81% of CNI organizations concerned the services that keep the US running are under threat. With high levels of risk associated with human factors, such as fear, natural error, or inadequate training, the research highlights the need for organizations to be particularly vigilant to insider threats and vulnerable employees as the economy continues to recover and nation-states remain politically motivated.

The research also highlighted that threats are continuing from all angles, with 38% of security decision makers worried social engineering and phishing attacks will increase as a direct result of economic uncertainty – which rises to 52% within the US finance sector.

The finance sector is under particular threat from ransomware attacks, with incidents occurring on average every 5-6 days in the past year compared with every two weeks across all sectors. A series of high-profile hacks against the sector, including February’s ransomware attack against financial software provider Ion Group, highlight fears that threat actors are preying on employees’ vulnerabilities and financial concerns to gain illicit access to sensitive critical data and systems.

Scott Nicholson, Co-CEO at Bridewell, commented: “Due to its importance to daily life and the economy, any insider threats whether through malice, negligence, or desperation, within critical infrastructure organisations could have severe and far-reaching consequences. The recent National Cybersecurity Strategy outlined the need for collaboration between private and public sector organizations to ensure national security is protected and maintained against threats from all angles. Sophisticated threat actors are primed to capitalize on human vulnerabilities and mistakes, so organizations must take proactive steps towards reducing insider risks through regular background checks, robust monitoring and access controls, and continual employee cybersecurity education and training that reflects the ever-evolving threat landscape. ”

Featured

  • Survey: Less Than Half of IT Leaders are Confident in their IoT Security Plans

    Viakoo recently released findings from its 2024 IoT Security Crisis: By the Numbers. The survey uncovers insights from IT and security executives, exposes a dramatic surge in enterprise IoT security risks, and highlights a critical missing piece in the IoT security technology stack. The clarion call is clear: IT leaders urgently need to secure their IoT infrastructure one application at a time in an automated and expeditious fashion. Read Now

  • ASIS International and SIA Release “Complexities in the Global Security Market: 2024 Through 2026”

    ASIS International and the Security Industry Association (SIA) – the leading security associations for the security industry – have released ”Complexities in the Global Security Market: 2024 Through 2026”, a new research report that provides insights into the equipment, technologies, and employment of the global security industry, including regional market breakouts. SIA and ASIS partnered with global analytics and advisory firm Omdia to complete the research. Read Now

  • President Biden Issues Executive Order to Bolster U.S Port Cybersecurity

    On Wednesday, President Biden issued an Executive Order to bolster the security of the nation’s ports, alongside a series of additional actions that will strengthen maritime cybersecurity and more Read Now

  • Report: 15 Percent of All Emails Sent in 2023 Were Malicious

    VIPRE Security Group recently released its report titled “Email Security in 2024: An Expert Look at Email-Based Threats”. The 2024 predictions for email security in this report are based on an analysis of over 7 billion emails processed by VIPRE worldwide during 2023. This equates to almost one email for everyone on the planet. Of those, roughly 1 billion (or 15%) were malicious. Read Now

Featured Cybersecurity

Whitepapers

New Products

  • EasyGate SPT and SPD

    EasyGate SPT SPD

    Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles. 3

  • Luma x20

    Luma x20

    Snap One has announced its popular Luma x20 family of surveillance products now offers even greater security and privacy for home and business owners across the globe by giving them full control over integrators’ system access to view live and recorded video. According to Snap One Product Manager Derek Webb, the new “customer handoff” feature provides enhanced user control after initial installation, allowing the owners to have total privacy while also making it easy to reinstate integrator access when maintenance or assistance is required. This new feature is now available to all Luma x20 users globally. “The Luma x20 family of surveillance solutions provides excellent image and audio capture, and with the new customer handoff feature, it now offers absolute privacy for camera feeds and recordings,” Webb said. “With notifications and integrator access controlled through the powerful OvrC remote system management platform, it’s easy for integrators to give their clients full control of their footage and then to get temporary access from the client for any troubleshooting needs.” 3

  • Hanwha QNO-7012R

    Hanwha QNO-7012R

    The Q Series cameras are equipped with an Open Platform chipset for easy and seamless integration with third-party systems and solutions, and analog video output (CVBS) support for easy camera positioning during installation. A suite of on-board intelligent video analytics covers tampering, directional/virtual line detection, defocus detection, enter/exit, and motion detection. 3