« Suspected Intrusions - To Block or Not to Block? | Main | Missing Laptops - Is there an acceptable rate of loss? »

Detecting Insider Threats – Easy in theory, hard in practice

The newspapers are full of coverage about the amazing case of Jerome Kerviel, the rogue trader at Societe Generale, alleged to have gambled $73 billion and cost the bank $7 billion. It’s a staggering loss, yet it’s a classic risk faced by all big banks. In fact some have suggested that there is no defence against this type of insider threat. Can that really be the case?

Yes and no. In theory it should have been easy. This was a man, like Nick Leeson, with knowledge of back office systems and their checks and controls. That is a clear risk. It’s claimed he didn’t take holidays and refused to allow colleagues to cover his desk. These are classic signs associated with insider fraud that should ring alarm bells.

Why was he not uncovered earlier? Because it’s not that easy in practice to challenge company staff. Most people don’t expect fraud. It’s outside their experience. They’re trusting and they respect other peoples’ privacy. It’s not nice to point suspicious fingers at colleagues. Managers defend their staff. And their initial reaction to a suspected fraud is to disbelieve accusations. It’s human nature. That’s why insider threats are hard to detect.

Bookmark and Share


TrackBack

TrackBack URL for this entry:
http://www.computerweekly.com/cgi-bin/mt/mt-tb.cgi/20114

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)

About

This page contains a single entry from the blog posted on January 27, 2008 9:41 PM.

The previous post in this blog was Suspected Intrusions - To Block or Not to Block?.

The next post in this blog is Missing Laptops - Is there an acceptable rate of loss?.

Many more can be found on the main index page or by looking through the archives.