Survey: Insider Threats Surge Across U.S. Critical Infrastructure

Survey: Insider Threats Surge Across U.S. Critical Infrastructure

Over three-quarters (77%) of organizations across US critical national infrastructure (CNI) have seen a rise in insider-driven cyber threats in the last three years, according to new research by leading cyber security services firm Bridewell. The threat from within ranges from criminal intent to individual negligence, but those surveyed said an act of intentional destruction at the hands of an employee was committed on average at least every other week within the last year.

Bridewell’s findings come amidst a growing international focus on insider-driven cyber threats against critical infrastructure. The recent US Pentagon data leak, which saw a junior employee leak highly sensitive information, highlights the increased importance of strong insider threat controls and broader operational security.

The ‘Cyber Security in CNI: 2023’ research report, which surveyed 525 cyber security decision makers in the US, in the transport and aviation, utilities, finance, government, and communications sectors, reveals that increased insider threat could also be linked to increased geopolitical tension and the current economic pressures felt by individuals, with over a third (35%) of critical infrastructure organizations reported a rise in the number of internal employees turning to cyber crime due to poor economic conditions.

At the same time, the worry around cyberwarfare right now also remains high, with 81% of CNI organizations concerned the services that keep the US running are under threat. With high levels of risk associated with human factors, such as fear, natural error, or inadequate training, the research highlights the need for organizations to be particularly vigilant to insider threats and vulnerable employees as the economy continues to recover and nation-states remain politically motivated.

The research also highlighted that threats are continuing from all angles, with 38% of security decision makers worried social engineering and phishing attacks will increase as a direct result of economic uncertainty – which rises to 52% within the US finance sector.

The finance sector is under particular threat from ransomware attacks, with incidents occurring on average every 5-6 days in the past year compared with every two weeks across all sectors. A series of high-profile hacks against the sector, including February’s ransomware attack against financial software provider Ion Group, highlight fears that threat actors are preying on employees’ vulnerabilities and financial concerns to gain illicit access to sensitive critical data and systems.

Scott Nicholson, Co-CEO at Bridewell, commented: “Due to its importance to daily life and the economy, any insider threats whether through malice, negligence, or desperation, within critical infrastructure organisations could have severe and far-reaching consequences. The recent National Cybersecurity Strategy outlined the need for collaboration between private and public sector organizations to ensure national security is protected and maintained against threats from all angles. Sophisticated threat actors are primed to capitalize on human vulnerabilities and mistakes, so organizations must take proactive steps towards reducing insider risks through regular background checks, robust monitoring and access controls, and continual employee cybersecurity education and training that reflects the ever-evolving threat landscape. ”

Featured

  • 12 Commercial Crime Sites to Do Your Research

    12 Commercial Crime Sites to Do Your Research

    Understanding crime statistics in your industry and area is crucial for making important decisions about your security budget. With so much information out there, how can you know which statistics to trust? Read Now

  • Boosting Safety and Efficiency

    Boosting Safety and Efficiency

    In alignment with the state of Mississippi’s mission of “Empowering Mississippi citizens to stay connected and engaged with their government,” Salient's CompleteView VMS is being installed throughout more than 150 state boards, commissions and agencies in order to ensure safety for thousands of constituents who access state services daily. Read Now

  • Live From GSX: Post-Show Review

    Live From GSX: Post-Show Review

    This year’s Live From GSX program was a rousing success! Again, we’d like to thank our partners, and IPVideo, for working with us and letting us broadcast their solutions to the industry. You can follow our Live From GSX 2023 page to keep up with post-show developments and announcements. And if you’re interested in working with us in 2024, please don’t hesitate to ask about our Live From programs for ISC West in March or next year’s GSX. Read Now

    • Industry Events
    • GSX
  • People Say the Funniest Things

    People Say the Funniest Things

    By all accounts, GSX version 2023 was completely successful. Apparently, there were plenty of mix-ups with the airlines and getting aircraft from the East Coast into Big D. I am all ears when I am in a gathering of people. You never know when a nugget of information might flip out. Read Now

    • Industry Events
    • GSX

Featured Cybersecurity

Webinars

New Products

  • EasyGate SPT and SPD

    EasyGate SPT SPD

    Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles. 3

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure. 3

  • HD2055 Modular Barricade

    Delta Scientific’s electric HD2055 modular shallow foundation barricade is tested to ASTM M50/P1 with negative penetration from the vehicle upon impact. With a shallow foundation of only 24 inches, the HD2055 can be installed without worrying about buried power lines and other below grade obstructions. The modular make-up of the barrier also allows you to cover wider roadways by adding additional modules to the system. The HD2055 boasts an Emergency Fast Operation of 1.5 seconds giving the guard ample time to deploy under a high threat situation. 3