This paper gives an overview of the restricted White paper, which examines:
- The size of the insider problem and who the culprits are;
- Why effective controls for one scenario may be ineffective for others;
- Why the FBI recently switched to behavioural detection methodology; and
- Why baselining normal behaviour and monitoring for abnormal activity are the most effective ways to combat these threats, regardless of insider motivation.