FixableRunning a website or small org
Insider threat
Harm from someone on the inside - careless or deliberate.
Understand it
Insiders already hold access. Most harm is accidental - a mistake, a mislaid file - but a disaffected or departing member of staff can also take data or cause damage on purpose.
How to spot it
Access well beyond a role, large unusual downloads, activity around someone’s departure.
Close the gap
- Give people only the access the job needs, and review it.
- Remove access the day someone leaves - the same day.
- Log access to sensitive data, so misuse can be seen.
- Build a culture where honest mistakes can be reported without fear.
What to do about it
This is part of the small-business plan - Separate admin from day-to-day accounts. Work through it there and you’ll close this off along with everything else it covers.