|
The article discusses insider threats in companies from different sectors and various methods for assessing them. The problem of information leakage is becoming more and more relevant for companies in all areas of economic activity, as a company can incur losses not only due to information leakage about its inventions, but also through lawsuits in case of theft of personal information of customers or contractors. This means that in order to gain access to international markets, Russian companies must have an appropriate level of protection not only for confidential information, but also for data on customers, contractors, etc. The purpose of the article is to analyze the existing methodological approaches to assessing insider threats in an enterprise as a and economic security. Different industries have different vulnerabilities to insider threats and should have appropriate approaches to managing insider threats. The study found that information leaks pose a serious threat to the economic and personnel security of the company. Today, there are significant improvements and the emergence of effective procedures to counter external threats, but protection against insider attacks remains quite low. In the course of the study, the concept of an insider attacker was defined, the types of insider threats were identified, and the main actions of personnel before an insider attack were identified. It has been proven that the degree of insider threat is determined by the nature of the company's activities and the liquidity of information that can become the subject of a leak. Most of the leaks are observed in high-tech companies and medical institutions, while the most liquid is the information of banks, financial institutions, industrial and commercial companies.
Keywords:corporate economic security, human capital, personnel security, insider threat, information database.
|