Insider Risk

Distinctive insight and expertise in responding to the complex nature of cyber-enabled and other insider activity and shaping integrated organisational and technical measures to provide appropriate defences for business and public sector organisations.

Harm arising from insider events is increasing in severity. Organisations’ ability to identify the risks and threats posed by insiders, including suppliers and partners, is an essential first step in preventing, mitigating and managing potential harms arising from internal acts of carelessness or malice.

GSA Global’s experts support the development of organisational and cyber/technical defences. We provide a range of strategic and tactical approaches including maturity assessments and insider operating models bespoke to the risk profile of individual organisations having considered governance and policy, staff selection, training, threat intelligence, incident management and reviews, and technical solutions’ integration and optimisation.

Insider Risk Management Strategy

GSA Global has distinctive insight and expertise in understanding the complex nature of insider threats and shaping integrated organisational and technical measures to provide an appropriate level of defence for business and public sector organisations.

GSA provides informed threat insider assessments that help businesses and other organisations understand and respond appropriately to insider and insider-enabled threats within their own organisations and in CTPs.

To help businesses understand the increasingly complex and multidisciplinary challenges of defending against insider attacks, GSA has developed a free, simple and user-friendly IRM Snapshot tool to help board members, business executives and functional leaders explore current IRM challenges through consideration of practical scenarios.

Find out more

Practical Guide to Navigating Martyn’s Law

Investigation & Crisis Management

GSA Global brings to bear exceptional human, User and Entity Behaviour Analytics (UEBA) technical, financial and physical investigative capabilities that enable our clients to understand and appropriately respond to the most complex and damaging insider incidents.

We provide human and technical investigative support to help identify and hold to account those responsible for harm or loss. We draw on decades of investigative experience in dealing with human, cyber/technical, financial and physical issues. Our investigators bring insights into the full range of insider threats informed by work for leading firms, technology providers and government agencies. They understand the business, legal and regulatory context, what is needed and appropriate to deliver legally robust investigations – and how best to recover from and mitigate risks of future insider activity.

Technical Solutions

GSA Global has extensive experience in handling advanced techniques including the use of ‘truth or deception’ technologies during investigations.

GSA Global also has UEBA system design and implementation experience that enables our clients to choose appropriate behavioural monitoring solutions, implement and integrate them with other security technologies and get the best value from them.

Security Vetting

GSA Global provides an extensive range of vetting services including international identity and criminal record checks, the verification of academic and other documentation, credit and insolvency, directorship and sanctions checks. These services can cover employees, contractors and (with appropriate agreement) staff in critical third parties. The seamless, automated service runs from the initial identity process, through harvesting the required data from, and about, the subject person, to a complete review of the gathered material, resulting in a robust certified report and advice.

Other managed services include dark web checks for material related to key staff and continuing monitoring of dark web and other vetting data sources for these sensitive staff. We also provide agreed and ethical monitoring of key staff employed by critical third parties.