---
title: 3 reliable strategies to avoid insider threats
description: Learn how can you establish cyber awareness in your organisation with our 3 strategies to avoid insider threats.
image: https://www.themissinglink.com.au/hubfs/Insider%20Threat%20Blog%20Image.jpg
---

[Cyber Security.](https://www.themissinglink.com.au/news/tag/cyber-security) 9.07.21

# 3 reliable strategies to avoid insider threats

Human error is involved in more than [90% of cyber security breaches](https://www.mimecast.com/products/awareness-training/). With the rise of remote working in 2020, the threat of making the wrong decision while working alone and isolated from the team has exponentially increased.

Sophisticated, phishing emails don’t alleviate the situation. In fact, they are the cause of one-third of all data breaches. The [most common insider threats security teams are most concerned](https://www.fortinet.com/content/dam/fortinet/assets/threat-reports/insider-threat-report.pdf) about include phishing attacks (38%), followed by spear-phishing (21%), poor passwords (16%), and browsing of suspicious websites (7%).

The growing amount of social engineering attacks using legitimate-looking phishing emails to target victims makes it even more important to help online staff detect threats and mitigate the risk of a data breach.

#### **To create a culture of good cyber hygiene, in other words, a human firewall, it is important to understand the three forms of human error:**

Lack of knowledge  
You don’t know what you don’t know. If employees are not trained in cyber security issues, they can’t be blamed if they do the wrong thing. They might simply not be aware that they are not acting in the best interest of their company. Therefore, cyber awareness training is crucial to help protect remote and office workers and avoid data breaches.

Lack of attention  
If employees are oblivious of cyber security essentials, they most probably don’t have the amount of attention that is required to protect themselves and their employer against malicious attacks. Cyber security is not their first priority. The solution is to attract their attention through training and connection to the in-house security team.

Lack of concern  
For many people, following a security protocol means more work, more attention to detail, and more discipline. Why even bother? To get all employees on the same page to eliminate insider threats, it is important to show them what’s in it for them when they follow the cyber security protocol.

#### **How can you establish cyber awareness in your organisation?**

**1. Prioritise cyber awareness training**

As with most things in life, we raise awareness through education. To minimise cyber security issues, we highly recommend prioritising cyber hygiene training and educating all employees about the increasing risks of cyber attacks, the most common attacks, such as phishing, spear phishing, and how to identify a threatening situation.

**2. Bridge the gap between departments and the security team**

CISOs need to ensure that all employees are aware of and understand the security policies and the impact their actions can have on the organisation. Cyber security can’t be the job of the security team alone. To protect your organisation from inside threats, the collaboration between the security team and the other departments, including remote workers is vital. This collaboration requires open communication, which requires trust.

**3. Establish best practices**

You have trained your staff; they know the security policies and are more aware of suspicious-looking emails. What next? They still might need a mnemonic to decide whether to click on that link or not. A great tool is the H - A - L - T acronym:

H = Header

A = Attachment

L = Links

T = Tone

Additionally, advice your team to ask themselves a few questions, such as

1. Do I know the sender of the email?

2. Am I asked to act with urgency?

3. Does it sound too good to be true (i.e. You have won a million dollars)

 

[![Cyber security training](https://www.themissinglink.com.au/hs-fs/hubfs/Cyber%20security%20training.png?width=2500&name=Cyber%20security%20training.png)](https://www.themissinglink.com.au/contact-us)

 

If you liked this article, you may also like:

[Privileged access in the new world](https://www.themissinglink.com.au/news/privileged-access-in-the-new-world)

[Red Teaming and the origins of anonymous hacking](https://www.themissinglink.com.au/news/red-teaming-and-the-origins-of-anonymous-hacking)

[What do you do after a data breach](https://www.themissinglink.com.au/news/what-do-you-do-after-a-data-breach)

**Author**

[The Missing Link](https://www.themissinglink.com.au/news/author/the-missing-link)

share

[**](http://www.linkedin.com/shareArticle?mini=true&url=https://www.themissinglink.com.au/news/3-reliable-strategies-to-avoid-insider-threats) [**](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.themissinglink.com.au%2Fnews%2F3-reliable-strategies-to-avoid-insider-threats) [**](https://www.twitter.com/share?url=https%3A%2F%2Fwww.themissinglink.com.au%2Fnews%2F3-reliable-strategies-to-avoid-insider-threats)

![The Missing Link](https://www.themissinglink.com.au/hubfs/TML-Infy-Core-Logo-RGB-Org%20-%20Edited.png)

- Featured Services
- [SmartCLOUD](https://www.themissinglink.com.au/smartcloud)
- [SmartPROTECT](https://www.themissinglink.com.au/smartprotect)
- [Application Security ](https://www.themissinglink.com.au/application-security)
- [RPA](https://www.themissinglink.com.au/ai-automation-services/ai-powered-automation/rpa-as-a-service)
- [Managed Detection ](https://www.themissinglink.com.au/managed-detection-and-response)
- [Managed IT ](https://www.themissinglink.com.au/managed-it-services)
- [Cloud Security Services](https://www.themissinglink.com.au/cloud-security-services)
- [Managed IT Security](https://www.themissinglink.com.au/managed-security-services)
- [Managed IT Sydney](https://www.themissinglink.com.au/managed-it-services-sydney)
- [Managed IT Melbourne](https://www.themissinglink.com.au/managed-it-services-melbourne)

- Legal
- [Terms & Conditions​](https://www.themissinglink.com.au/terms-and-conditions)
- [Fair Use Policy](https://www.themissinglink.com.au/fair-use-policy)
- [Terms of Use](https://www.themissinglink.com.au/terms-of-use)
- [Privacy Policy](https://www.themissinglink.com.au/privacy-policy)
- [Acceptable Usage Policy](https://www.themissinglink.com.au/acceptable-usage-policy)
- [Cookie Policy](https://www.themissinglink.com.au/cookie-policy)
- [Vulnerability Disclosure Policy](https://www.themissinglink.com.au/vulnerability-disclosure-policy)

- More
- [Contact Us ​](https://www.themissinglink.com.au/contact-us)
- [Careers](https://www.themissinglink.com.au/careers)
- [Government ​](https://www.themissinglink.com.au/government)
- [Sitemap ](https://www.themissinglink.com.au/our-sitemap)

##### Acknowledgement of Country

The Missing Link acknowledges the Traditional Owners of the land where we work and live. We pay our respects to Elders past, present and emerging. We celebrate the stories, culture and traditions of Aboriginal and Torres Strait Islanders of all communities who also work and live on this land.

**

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "The Missing Link",
    "url" : "https://www.themissinglink.com.au/news/author/the-missing-link"
  },
  "dateModified" : "2023-06-02T01:26:55.055Z",
  "datePublished" : "2021-07-09T05:31:54.000Z",
  "headline" : "3 reliable strategies to avoid insider threats",
  "image" : [ "https://www.themissinglink.com.au/hubfs/Insider%20Threat%20Blog%20Image.jpg" ],
  "mainEntityOfPage" : {
    "@id" : "https://www.themissinglink.com.au/news/3-reliable-strategies-to-avoid-insider-threats",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://www.themissinglink.com.au/hubfs/TML-Infy-Core-Logo-RGB-Org%20-%20Edited.png"
    },
    "name" : "The Missing Link"
  }
}
```

```json
{
  "@context" : "https://schema.org/",
  "@type" : "WebSite",
  "name" : "The Missing Link",
  "potentialAction" : {
    "@type" : "SearchAction",
    "query-input" : "required name=search_term_string",
    "target" : "https://www.themissinglink.com.au/results{search_term_string}"
  },
  "url" : "https://www.themissinglink.com.au/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@type" : "Organization",
  "logo" : "https://www.themissinglink.com.au/hubfs/svgs/TML_Logo-Aust-UK.svg",
  "name" : "The Missing Link",
  "sameAs" : "https://www.linkedin.com/company/the-missing-link-pty-ltd/",
  "url" : "https://www.themissinglink.com.au/"
}
```