Today's issue includes events affecting Argentina, Brazil, Chile, China, Dominican Republic, Ecuador, European Union, Oman, Peru, Russia, Turkey, United Kingdom, United States, and and Uruguay.

Bring your own context.

There may be more to an insider threat program than we tend to think.

"What do you need to think about when you're creating an insider threat program? We've broken it into four steps. Number one - think about what team you're going to pull together. While I'm probably writing this for security practitioners, security is not the only stakeholder and maybe not even the most important stakeholder. We want to make sure we have HR. They're definitely a really important stakeholder. Legal's going to be a part of this, and depending on your company, product is a part of this, maybe sales. It really depends on who is it that's concerned about insiders and what they may do. The second step of creating the program is - what are the risks that you need to address for your company? You know some obvious ones - right? - theft of intellectual property, customer data that may get stolen. Based on what you do, you want to think about sabotage of your organizational systems. You know, are there national security concerns? If you're running a water plant, you know, maybe those are both pretty relevant. The third step that we looked at was identifying the critical controls that you need to watch - once again, you know, some things that are pretty much generally across the board you want to look at. Every company wants to look at their sales folks, their finance folks, their executive team, probably some IT system administrators."

—Robb Reck, CISO at Ping Identity, on the CyberWire Daily Podcast, 7.23.19.

It's a truism to say so, but an insider threat program is an exercise in risk management. Some of that risk might come from a poorly constructed program. Did you notice that HR and Legal both have a place on the team?