Abstract

There are several models and frameworks that assist in understanding insider threat. However, practical limitations in operationalising these models include them being overly complex, too subjective, cumbersome, or lacking dimensionality. In response, this study looks to operationalise a practice-based framework for determining organisational vulnerability to intentional insider threat. The study reports on an Exploratory Factor Analysis (EFA) to determine the validity and reliability of the Organisational Vulnerability to Intentional Insider Threat (OVIT) diagnostic tool. The EFA results (construct validity and reliability statistics) show promise for the use of the OVIT in operationalising intentional insider threat detection. Limitations of the study are presented and future research progressing this exploratory study are encouraged.

摘要

有多种模型和框架可帮助理解内部威胁。然而，操作这些模型的实际限制包括它们过于复杂、过于主观、繁琐或缺乏维度。作为回应，本研究着眼于实施一个基于实践的框架，以确定组织对故意内部威胁的脆弱性。该研究报告了探索性因素分析 (EFA)，以确定组织对故意内部威胁的漏洞 (OVIT) 诊断工具的有效性和可靠性。EFA 结果（结构有效性和可靠性统计数据）显示了使用 OVIT 来实施有意的内部威胁检测的前景。介绍了该研究的局限性，并鼓励未来的研究推进这项探索性研究。