A Conceptual Model for Holistic Classification of Insider

TL;DR

This paper proposes a holistic model for classifying insiders within organizations, integrating qualitative analysis and structural evaluation to improve investigation processes and security policy effectiveness.

Contribution

It introduces a new comprehensive model for insider classification that enhances understanding and management of insider threats beyond traditional criteria.

Findings

The model enables thorough insider misuse investigations.

It offers a framework to integrate into security policies.

Improves understanding of insider dynamics.

Abstract

The process through which an insider to an organization can be described or classified is lined within the orthodox paradigm of classification in which an organization considers only subject with requisite employee criterion as an insider to that organization. This is further clouded with the relative rigidity in operational security policies being implemented in organizations. Establishing investigation process in instances of misuse occurrence and or ascertaining the efficiency of staff member using such archaic paradigm is maligned with endless possibilities of uncertainties. This study, therefore, proposes a holistic model for which insider classification can be crystallized using the combination of qualitative research process and analysis of moment structure evaluation process. A full comprehension of this proposition could serve as a hinge through which insider misuse investigation can be thoroughly carried out. In addition, integrating this paradigm into existing operational security policies could serve as a metric upon which an organization can understand insider dynamics, in order to prevent misuses, and enhance staff management.