{"id":15977,"date":"2020-09-03T16:44:59","date_gmt":"2020-09-03T20:44:59","guid":{"rendered":"https:\/\/abovethelaw.com\/?p=693014"},"modified":"2020-09-03T16:44:59","modified_gmt":"2020-09-03T20:44:59","slug":"on-detecting-and-deterring-moles-and-miscreants-in-the-workplace","status":"publish","type":"post","link":"https:\/\/abovethelaw.com\/legal-innovation-center\/2020\/09\/03\/on-detecting-and-deterring-moles-and-miscreants-in-the-workplace\/","title":{"rendered":"On Detecting And Deterring Moles And Miscreants In The Workplace"},"content":{"rendered":"

\"\"Organizations are facing increasingly complex and international threats — from trade-secret exfiltration from countries like China<\/a> in furtherance of economic espionage and academic advantages, to criminal gangs intent on installing malware on networks to extract hefty ransoms. While the exploits themselves are not new, the pace, the breadth, and the incentives are enhanced, creating heightened concern at the highest corporate and governmental levels. With trade secrets, valuable IP, reputation, and shareholder value on the line, what are best-in-class security teams doing to protect themselves against advanced threat actors?<\/p>\n

Know And Protect Your \u2018Crown Jewels\u2019<\/b><\/p>\n

Identifying the \u2018crown jewels\u2019 of an organization is often a reasonable first step in understanding how best to protect these treasures, especially for enterprises with mature security teams leveraging threat intelligence, red team, threat hunting, trust and safety, and incident response capabilities. Key customer lists, intellectual property descriptions, business strategy documents, board materials, and network access lists form the basis of corporate value. Understanding where these jewels exist and how they are being protected is critical in protecting them, according to Nisos<\/a> co-founder Landon Winkelvoss, who worked within the intelligence community fending off nation-state actors.<\/p>\n

A flat network where an adversary has natural access or can move laterally to pick up jewel after jewel creates an absolute windfall for the intruder. Reverse this game of cyber \u2018pick-up-sticks\u2019 by segmenting critical areas of the network and using creative, customized, and cost-effective monitoring solutions so that intruders are limited in their ability to gain access to and proceed through the corporate bounty.<\/p>\n

Develop An “Open-Door” Security Culture<\/b><\/p>\n

A culture of security awareness is a healthy ecosystem where employees feel empowered to come to a security team or legal department with concerns that a heist is underway. According to the Federal Bureau of Investigation<\/a>, organizations that ward off intellectual property theft the best do so through cultural and systematic controls which include the following measures:<\/p>\n