Cyber Security: Links

Higher rates of insider attacks are associated with higher rates of employee data access.
Employ the principle of least privilege
Develop an anonymous tip program
Practice separation of duties
Ensure departing employees are properly offboarded
Use software to ease insider threat mitigation

CISOs rank Insider Risk (27%) as the most difficult threat to detect: placing it above cloud data exposures (26%) and malware/ransomware (22%).

Some examples of shadow IT applications and cloud-based services are:
Slack, Trello, and other productivity tools
Gmail, Google Drive, and other Google Suite elements
Dropbox, Box, and other peer-to-peer collaboration tools
Apple AirDrop and other Bluetooth-based sharing tools
WhatsApp and other messaging apps
Microsoft Office 365 tools
Generative AI tools
A few examples of shadow IT hardware include:
Personal laptops
Tablets
Smartphones
USB flash drives
Hard disk drives (HDDs)
PCs

Best practices, toolkits, and templates for higher education.

Through the EDUCAUSE Cybersecurity Program, you can find the tools, resources, and peer connections you need to learn about, better understand, or help promote information security and privacy to everyone across your campus, including institutional leadership, students, faculty, staff, and external partners.

HEISC Partnerships
Center for Internet Security (CIS)
InCommon
Internet2
National Council of ISACs
National Cyber Security Alliance (NCSA)
REN-ISAC (Research Education Networking Information Sharing and Analysis Center)
Research Security Operations Center (ResearchSOC)
SANS Institute and Securing the Human
TrustedCI: The NSF Cybersecurity Center of Excellence

Key Competencies include:
Communication Skills and Strategies
Analyze different communication styles
Communicate with different audiences
Create effective training and presentations
Project Strategies and Best Practices
Knowledge of industry best practices
Identify and manage risks
Prioritize and balance information security vs privacy
Resource Management
Identify common funding sources
Explore data-informed budgeting processes
Allocate resources to manage funding effectively
Leadership Practices
Analyze different leadership approaches
Faciitate continuous feedback and coaching
Identify key stakeholders, governance structures
Navigate available social and political resources

Understanding Insider Threats: Definitions, Types, and Categories:
Malicious insiders are the people who abuse company data and assets on purpose with deliberate malicious intent.
Opportunistic insiders are very common and can be thought of as malicious insiders without premeditated intent.
Negligent insiders expose data or assets by consciously breaking security policy. The intention may not be to cause harm but rather simply to perform a task in a way the user perceives as faster or easier.
Accidental Insider Threats. Many users will expose data purely by accident. Modern applications make it very easy to share data, and a busy, distracted user can easily make mistakes that can take data out of the company’s control.
Compromised Insider Threats. The compromised end user can blur the lines between an insider threat and a more traditional external threat. A compromised user occurs when a threat actor or malware is able to take control of a user’s machine and/or credentials to steal data and other critical assets.

User and entity behavior analytics (UEBA) is a category of cybersecurity tools that use mathematical models to find unusual behavior that could indicate a threat. Originally known as user behavior analytics (UBA), the term “entity” was added to include the behavioral analysis of non-human assets such as physical devices or applications in addition to traditional end users.