Managing Insider Risk in the Healthcare Sector

Since 2001, the National Insider Threat Center in the Community Emergency Response Team Division of the Software Engineering Institute has analyzed thousands of incidents where insiders have intentionally and unintentionally caused harm to organizations. This session will describe how insider incidents in the healthcare sector tend to evolve over time, identifying technical and behavioral potential risk indicators; compare and contrast different types of insider incidents by highlighting the impacts of actual incidents; recommend controls to reduce the likelihood of an incident; review an insider threat program roadmap; and conclude by presenting best practices to mitigate insider threats.