Swiss Army Knife

Education Level: Advanced

6411 - IT Sabotage and Workplace Violence: Two Sides of the Same Coin?

Speaker(s)

• 

  Michael Theis

  Assistant Director for Research
  CERT Insider Threat Center, Software Engineering Institute, Carnegie Mellon University

This session will describe the findings of the CERT Insider Threat Center's research into comparing and contrasting workplace violence and IT sabotage. The findings will identify the predispositions, precursors and behaviors that are common to both. We'll also suggest how organizations can develop dual-purpose, socio-technical controls to prevent, detect or proactively respond to the indicators before the damage occurs. Attendees will be given access to multiple free resources from CERT, including mitigation strategies for preventing, detecting and responding to all types of malicious and unintentional insider threats. There will also be an action plan presented for an organization's quick wins and high impacts for the next 30/60/90 days after the conference.

Learning Objectives:

• Identify what common factors exist before either IT sabotage or workplace violence occurs.
• Identify potential mitigation strategies for both IT sabotage and workplace violence without having to know which crime will occur.
• Implement a 30/60/90-day action plan to prevent, detect and respond to either IT sabotage or workplace violence without having to know which crimes will occur.