Disasters come from many directions. When we think about Business Continuity Planning and Disaster Recovery, we often consider threats such as fires, floods, earthquakes, tornados, or hurricanes. We also think of malicious attacks from outside our organizations. These would include hackers, viruses, malware, Trojan horses, etc. But in many cases the threat is inside the organization.

There are two major types of internal threats to IT which organizations face: accidents and malicious attacks or sabotage.

In a May 2008 technical report from The Software Engineering Institute and Carnegie Mellon University entitled “The ‘Big Picture’ of Insider IT Sabotage Across U.S. Critical Infrastructures” threats from insiders are discussed in detail. [Read more...]