Where can buy Managing the Insider Threat No Dark Corners 1st Edition Nick Catrantzos ebook with cheap price
Where can buy Managing the Insider Threat No Dark Corners 1st Edition Nick Catrantzos ebook with cheap price
Where can buy Managing the Insider Threat No Dark Corners 1st Edition Nick Catrantzos ebook with cheap price
https://ebookgate.com
https://ebookgate.com/product/managing-the-
insider-threat-no-dark-corners-1st-edition-nick-
catrantzos/
https://ebookgate.com/product/managing-the-insider-threat-no-dark-
corners-1st-edition-edition-safari/
ebookgate.com
https://ebookgate.com/product/insider-threat-protecting-the-
enterprise-from-sabotage-spying-and-theft-1st-edition-eric-cole/
ebookgate.com
https://ebookgate.com/product/managing-health-services-understanding-
public-health-1st-edition-nick-goodwin/
ebookgate.com
https://ebookgate.com/product/a-shot-in-the-dark-a-creative-diy-guide-
to-digital-video-lighting-on-almost-no-budget-1st-edition-jay-holben/
ebookgate.com
https://ebookgate.com/product/the-threat-intelligence-handbook-chris-
pace-ed/
ebookgate.com
https://ebookgate.com/product/the-dark-fortress-1st-edition-daniel-
lipkowitz/
ebookgate.com
https://ebookgate.com/product/bollettieri-changing-the-game-1st-
edition-nick-bollettieri/
ebookgate.com
https://ebookgate.com/product/the-dark-knight-system-1st-edition-
james-schuyler/
ebookgate.com
MANAGING THE
INSIDER THREAT
No Dark Corners
Nick Catrantzos
Managing the
Insider Threat
No Dark Corners
Managing the
Insider Threat
No Dark Corners
Nick Catrantzos
CRC Press
Taylor & Francis Group
6000 Broken Sound Parkway NW, Suite 300
Boca Raton, FL 33487-2742
This book contains information obtained from authentic and highly regarded sources. Reasonable efforts have been made to
publish reliable data and information, but the author and publisher cannot assume responsibility for the validity of all materials
or the consequences of their use. The authors and publishers have attempted to trace the copyright holders of all material repro-
duced in this publication and apologize to copyright holders if permission to publish in this form has not been obtained. If any
copyright material has not been acknowledged please write and let us know so we may rectify in any future reprint.
Except as permitted under U.S. Copyright Law, no part of this book may be reprinted, reproduced, transmitted, or utilized in any
form by any electronic, mechanical, or other means, now known or hereafter invented, including photocopying, microfilming,
and recording, or in any information storage or retrieval system, without written permission from the publishers.
For permission to photocopy or use material electronically from this work, please access www.copyright.com (http://www.copy-
right.com/) or contact the Copyright Clearance Center, Inc. (CCC), 222 Rosewood Drive, Danvers, MA 01923, 978-750-8400.
CCC is a not-for-profit organization that provides licenses and registration for a variety of users. For organizations that have been
granted a photocopy license by the CCC, a separate system of payment has been arranged.
Trademark Notice: Product or corporate names may be trademarks or registered trademarks, and are used only for identifica-
tion and explanation without intent to infringe.
Visit the Taylor & Francis Web site at
http://www.taylorandfrancis.com
Foreword xvii
Preface xix
Author xxi
v
vi Contents
The Alternative 24
Balancing Trust and Transparency: The Copilot Model 26
Contrast with Traditional Strategy 27
New Insider Defenses 28
Close Probation 28
Transparency on the Job 28
Team Self-Monitoring 29
Comparison with Other Security Strategies 29
Questions for Online or Classroom Discussion 32
Exercises for Group Projects 32
Endnotes 33
The Setting 84
All-Find’s Approach 84
Pro-Back’s Approach 85
Business Outcome 85
Conclusion 86
An Overlooked Problem: Investigating the Nonemployee 86
Access the Real Issue 87
Questions for Online or Classroom Discussion 91
Exercises for Group Projects 91
Endnotes 91
Conclusion 285
Questions for Online or Classroom Discussion 286
Exercises for Group Projects 286
Endnotes 287
When conflict is a question of force against force, options are simple. Victory goes to the
side that has the bigger numbers, the better weapons, or superior maneuvering capability.
But what happens when the real danger comes from within? Insider threats scare all of us
because we can never be sure that we are so strong, so fast, or so powerful that one well-
placed betrayer cannot cost us everything. This book examines precisely this challenge of
our age, the insider threat, and how to defend against it.
Nick Catrantzos and I trace our collaboration to the 1990s, when Nick worked on
one of my consulting engagements for a major information powerhouse. The latter came
to me after spending tens of millions of dollars to anticipate an upcoming crisis situa-
tion. Somehow, though, corporate leaders had the nagging feeling that they may have
missed something. Nick’s job became to uncover what they had missed, while my job
was to figure out how to do this on a limited budget, with an impending deadline, and
on an uneven corporate landscape where not all departments involved in the project were
on the same page. Between the two of us, Nick and I found that the Achilles’ heel here
was that various departments were not communicating with each other and were thus
more likely to duplicate, collide, or fail when the actual crisis came. In a sense, the client
had adequately defended against outsider threats without realizing how vulnerable the
organization was from within. This, to me, offered a revealing insight into insider threats
and how they crop up in the best of organizations. The story ended well, but we had our
moment of truth in telling the bad news to the client. To the latter’s credit, they eventu-
ally asked me to send Nick to visit their headquarters after they had taken our recom-
mendations to heart and started bringing their various departments to work together in
crisis simulations and regular drills. In short, they brought their talented people out of
the dark corners into the light of shared purpose and collaboration. And they were proud
of this—even to the point of showing off in front of us. In my mind, this little consulting
engagement epitomizes what Nick’s No Dark Corners approach is all about.
Since this consulting involvement, Nick went on to study the conventional wisdom
on insider threats as a topic for a master’s thesis. The findings from his social sciences
research surprised him. Why is it that more controls do not work? Why does overreliance
on specialized security functions—called corporate sentinels—frequently end up being
counterproductive? Why don’t some standard insider defenses like background inves-
tigations expose hostile trust betrayers? These are some of the questions answered in
Managing the Insider Threat: No Dark Corners.
This book begins with a CliffsNotes version of Nick’s insider threat research and
ends with a thought-provoking examination of what it takes to advise an organization
on how to institute the No Dark Corners approach to insider threat defense, whether by
launching it internally or through outside, consulting resources. As I have learned in more
than 25 years of international consulting, sometimes where an organization stands on an
xvii
xviii Foreword
issue depends on where its advisers sit. Some entities accept, welcome, and insist on keep-
ing certain engagements entirely in-house. Others have to go outside not only for objec-
tivity but also to avoid the awkwardness of exposing certain doubts and vulnerabilities
to underlings or rivals in the same organization that they have to work with on a routine
basis. So this last chapter on consulting resonates particularly well with me.
In between the research findings and the last chapter, though, Nick presents some
fascinating contrarian ideas about issues such as
• Why infiltrators are more likely to be the more serious danger to an organization
than ordinary, disgruntled employees
• How deception plays a role in every kind of insider threat, from the most seri-
ous, existential threat to the kind of nuisance that just makes life more difficult
on the job
• How the smart leader and resourceful organization have more options than most
realize, particularly when it comes to using tactics of lawful disruption to thwart
hostile trust betrayers
This is just a small sample of what awaits the reader of this book. The reader will
find that this work taps a multitude of sources and the author’s expertise in offering new
insights into how to deal with the kind of threat every professional fears and, sooner or
later, must face. This book demystifies the insider threat, making solutions accessible to
any professional, not just to specialists. The No Dark Corners approach gives all of us
a chance to take a hand in our own protection. Written intelligently, supported analyti-
cally, and filled with useful case studies and examples, this book is destined to become
a classic in taking a holistic approach to solving a very vexing predicament. I hope you
enjoy it as much as I did.
James E. Gordon
Managing Director
Navigant Consulting
Hong Kong, 2011
Preface
An enemy launching a frontal attack can be anticipated and repulsed. An adversary who
attacks from within, however, is not so readily countered. This book began as a study
seeking to identify defenses against trust betrayers who were targeting critical infrastruc-
ture. It then evolved into a thesis that earned top writing honors at the Naval Postgraduate
School1 and into a subsequent article in the peer-reviewed journal Homeland Security
Affairs.2 Bolstered by further research commissioned by a professional security indus-
try association, the work next migrated into an industry research report, Tackling the
Insider Threat,3 samplings of which reappear in this book in Chapter 10 in edited form,
with the permission of the ASIS Foundation. This book now synthesizes the findings of
these preceding works, building upon them to explore the insider threat in some of its
different dimensions and to present interpretive methods for applying No Dark Corners
strategies to contend with real-world insider trust betrayal as an existential and non�
existential threat.
Using a Delphi method, this work harvested insights of experts from mature arenas
of defense against insider threats, such as workplace violence and counterespionage, in
order to assist with defending against the insider threat to critical infrastructure. Findings
uncovered flaws in institutional defenses that adversaries can exploit, with infiltrators
posing a greater threat than disgruntled insiders. Resulting recommendations ran counter
to accepted wisdom. These recommendations shaped the contours of a No Dark Corners
approach that applies and extends seminal theories of Oscar Newman’s Defensible Space
and George Kelling’s Fixing Broken Windows.
The student or practitioner will find this book progressing through three sequential
phases of exposition. Part I, Diagnostics, begins with problem definition (Chapter 1)
and research findings (Chapter 2) that led to the No Dark Corners strategy for address-
ing insider threats. With these foundational underpinnings, Part II then shifts gears to
examine agents of change, namely, key players in a position to implement or undermine
the No Dark Corners strategy, including corporate sentinels (Chapter 3) as well as leaders
affecting application of this approach (Chapter 4).
Next, in Part III, the book examines key areas where No Dark Corners–style engage-
ment can make a difference in the way the institution counters insider threats: rethinking
background investigations (Chapter 5), recognizing deception (Chapter 6), and lawful
disruption (Chapter 7). Continuing a migration from the theoretical to the practical in
applying the innovations of No Dark Corners within an organizational framework, suc-
ceeding chapters examine application challenges for existential threats and involvement
xix
Another random document with
no related content on Scribd:
THE TRIAL.
SIMPLE AND UNADORNED TRUTH STRUGGLING WITH ALL THE
FORCES
OF TALENT, WEALTH AND PROPPED UP FALSEHOOD—THE
CONVICTION
ONLY A VICTORY IN NAME FOR THE PROSECUTION,
BUT IN REALITY A LASTING TRIUMPH FOR THE DEFENCE.
The Clerk of the City Court of Mobile has twice been applied to for
particulars, or for a copy of the records of the trial. In his first reply
the present Clerk freely confesses the records of the case to be
misty, suspicious, deranged, and altogether unsatisfactory, without
venturing any further opinion on the matter. In his second reply he
confesses in still stronger terms, if possible, of the confusion of the
records; important papers not on file; much missing; more
deranged, and very hard, with any amount of application of labor to
make anything of value intelligible for rigid comprehension—one
case, Shoemake’s, entirely disappearing from the docket, and no
circumstances or account left to show the cause for the same.
In substance, here follows an extract from the Clerk’s replies: “I
find by the Clerk’s indorsement, that in the November term, 1858,
the Grand Jury found bills for four cases of libel against J. R. S. Pitts,
and four indictments were framed accordingly in the same term.
They are found docketed, numbers 61, 62, 63 and 64, to be
prosecuted severally by G. Y. Overall, C. F. Moulton, G. A. Cleaveland
and S. S. Shoemake. There are four appearance bonds for six
hundred dollars each, dated January 25, 1859. The writ of arrest is
dated January 15, 1859. But the indictments are all missing. There is
nothing here on file or on record showing any action of either the
Governor of Alabama or the Governor of Mississippi with respect to
the processes for arrest. The case number 64 has entirely
disappeared, and no trace left to account for the same. In the
February term, 1859, the trial of J. R. S. Pitts commenced on the
23d, continued through the 24th, and on the 25th was given to the
jury, who on the 2d day of March rendered a verdict imposing a
penalty of fifty dollars, to which finding the Court further ‘ordered
that the defendant be imprisoned in the common jail of the county
for the space of three months, and on the non-payment of the fine
and costs that he be further imprisoned until discharged according to
law.’ The case tried must have been that of Overall, 61, the papers
of which have entirely disappeared, as I cannot find them on file.
The two remaining cases, numbers 62 and 63, were continued from
term to term until February 28, 1863, when a forfeiture of bond was
taken against the defendant and his sureties, Colin McRae and
James H. Daughdrill, and then continued through several terms to
21st of March, 1864, when judgment final was entered, and
execution issued, which execution was ordered to be returned by the
Commissioners of Revenue on the payment of all costs, the costs
being paid by said Daughdrill said execution was returned. The
matter remained in this condition until January, 1867, when the
defendant and his sureties were finally released by the
Commissioners of Revenue.
“The names of the Petit Jury who tried the case are Wm. B.
Hayden, James B. Post, George Mason, George M. Brower, Edward
Guesnard, John R. McBurney, W. H. Marchan, Henry T. Eatman,
Walter L. Young, Benjamin F. Hunt, John A. Bevell and Wm. H.
Vincent. The only witnesses I can find any record of are the
prosecutors for themselves. The attorneys for the prosecution were
R. B. Armstead, solicitor, and Anderson & Boyle, while Manning and
Walker appeared to have conducted the defense.
“Imperfect as this history of the case is, it has cost me much
search and labor to collect from the disconnected, confused and
garbled materials left me for reference. The whole affair is a myth.”
Shoemake, the first witness for the prosecution, had made such a
wretched failure that no efforts were made to bring in the other
witness from Mississippi of the same character, Bentonville Taylor.
The prosecution next introduced two witnesses from Columbus,
Miss., and one by the name of G. W. Overall, all to prove an alibi,
and that G. Y. Overall was positively residing in another place at the
time referred to in Copeland’s confessions. This testimony was
satisfactory and unobjectionable; but, as will be shown in further
progress of the trial, did not in reality invalidate the confessions in
any material point whatever.
The examination and cross examination of the different witnesses,
with the arguments of the opposing counsel, occupied the Court for
about two days; and had G. Y. Overall’s object been nothing further
than the establishing of his own innocence, he might have
succeeded commensurate with his own unbounded desire; but what
was he doing associated with such men as S. S. Shoemake and
Bentonville Taylor? The complete unmasking of the infamous
conduct of the former was anything but auspicious for the
prosecution, and left a very unfavorable impression on all who heard
the proceedings as to the character of the prosecution.
Upon the reception of said report, the Judge made some changes
in his former charges to the effect that if doubt existed, the Jury
must give the defendant the benefit of such doubt; further adding,
that he should not discharge until the rendering of its verdict; and at
once ordered it to retire again, with additional information that if it
required any explanation on any points of law involved in the case
before it, to report accordingly to the Court, and it would give the
proper instructions sought for. After the Jury had remained some day
or two longer in retirement, the Court ordered it to report, on the
arrival of which, the Court desired to know the points of
disagreement. In answer, one of the jurors, W. L. Young, rose and
respectfully addressed the Court, stating that a majority of the Jury
entertained doubts; and as for himself, he had conscientious
scruples as to the propriety of confounding G. Overall and G. Y.
Overall together; while, at the same time, the principal part of the
Jury did not believe that when Copeland gave the name that he
intended it for G. Y. Overall, and that the latter had no proper
authority for accepting the name of G. Overall, as published in the
confessions. The presiding Judge appeared to be well pleased with
the manly and intelligent conduct of the young gentleman, but
informed him at the same time that the Jury must be governed
according to the law and evidence before it. To this declaration, Mr.
Young made the following reply: “Please your Honor, and suppose
we do not believe the evidence in the case before us.” This ready,
but profound reply excited, to all appearance, a pleasant smile on
the Judge’s countenance, and created no little sensation throughout
the court-room among the legal fraternity, some of which were
heard to exclaim—“a pretty good lawyer himself.” The Judge, feeling
the weight of such an expression, did not attempt any further
remarks in reply for this time.
The jury once more retired. The court kept furnishing fresh
charges in opposition to the first given; the last of which was so
pointedly as to declare in positive terms that according to the law
and evidence it, the jury, was compelled to find a verdict for the
prosecution! Six long days and nights had this jury remained in
confinement. Worn out by it and with excessive loss of rest, together
with no hope of immediate relief, as the judge had declared his
intention to keep it in strict confinement for an indefinite period,
unless a verdict could sooner be returned; all these miseries
endured, and in prospect to be endured, forced the jury at last to a
verdict against its better judgment by the understanding or
impression artfully made that it would be better to get liberty by
agreeing to a verdict with a small amount of fine in the way of
damages for G. Y. Overall, but had not the most distant idea of any
imprisonment resulting. But the judge better knew the law which
invested him with power to imprison for six months, but in this
instance he sentenced only for three months.
In addition to the torturing process resorted to for the purpose of
forcing a verdict from the jury in its last hours of confinement, other
shameful means were made use of by outsiders of a tampering
nature—such as the conveyance of notes and packages in bottles to
that part of the jury in favor of the prosecution—one end of the
string tied to the bottle, and the other end, in the form of a ball,
thrown through the window to be received by the parties intended.
The nature of these notes and packages could only be conjectured—
the recipients themselves holding the contents a perfect secret
within their own little circles. This information was conveyed to the
defendant by eye-witnesses and part of the jury.
After the sentence was announced, Dr. Bevell and others, who
formed a part of the jury, openly declared that if they had been
aware of the fact that the judge had the power to imprison, suffering
as they were, never would they have consented to a verdict in favor
of the prosecution. Another distinguished juror, W. L. Young, on the
case, on seeing the defendant coming from the court-room, met him
with all the warmth of genuine friendship and the most sincere of
emotion, sympathy, and contrition, which will be best understood in
his own words: “My dear sir, my feelings are deeply wounded, and I
feel as though I have committed a very great wrong in giving
consent against my better judgment—a wrong even to fine you so
much as one single cent, and were the case to be done over again,
with the light now before me, I would most assuredly act quite
differently, for I now see my great error, though my greatest grief is
that this lesson was taught too late to be of any service to you in
your present humiliated situation.” The reply was suitable, and in
these words: “Permit me, sir, to acknowledge your truly sympathetic
manifestations with all the welcomeness and gratitude which are
possible to be expressed; and also to further express to you that
notwithstanding this heavy stroke of adversity, I will endeavor to
bear the same with philosophical fortitude, under the strengthening
conviction that this is the most memorable epoch of life, and in spite
of malignant persecution, justice will afterwards be done, and time
will bring forth its appropriate reward.”
This is, perhaps, the proper place for the insertion of Dr. Bevell’s
letter to Miss Bowen. It contains important matter of a public nature,
which will again have to be referred to in the subsequent comments
which are to follow. Let it be carefully read:
April 12, 1859.
Miss J. P. Bowen, Ocean Springs, Miss.:
Excuse me, an entire stranger to you, for the liberty and freedom I
take in addressing you. Although, personally, we are unacquainted
yet my sympathies are with you and your unfortunate intended. I
formed his acquaintance in Augusta, Miss., while he was engaged in
writing the confessions of Copeland—the cause of his present unjust
imprisonment. Although he is in prison, and redeeming an unjust
sentence, his friends have not deserted him, as is too often the case,
but visit him regularly and inquire after his welfare with the greatest
anxiety, and endeavor to administer to his every want and comfort.
His friends, though numerous previous to his trial, have greatly
increased in number since. We have made an effort to limit his
imprisonment through the pardoning power of Governor Moore, by
an article addressed to him in the shape of a petition, with about six
hundred signatures of the most responsible citizens of Mobile; but in
this we have failed, and, to my deepest regret, he will have to serve
his time out.
We first drew up a petition to Judge McKinstry, signed by a
respectable number of the jury, but hearing of his negative
declarations on the street, we declined honoring him with the
request.
Although we have failed in these efforts, the conduct of all the
opposing clique strongly indicate to my mind that the principal
stringent ruling is to gratify, and sustain, and retain political
influence. The opposing party have by no means sustained itself to
the world, notwithstanding the obtaining of a forced verdict and fine
in the pitiful sum of fifty dollars, which the jurors are determined
shall not come out of Colonel Pitts’ pocket. The Colonel has the
sympathy of the principal citizens of Mobile; and, among that
number, almost, if not quite, the entire portion of the gentler sex;
and as long as he has those amiable creatures advocating his cause
he is free from all censure and harm. He was extremely unfortunate
in not being able to prove certain facts on his trial that have since
almost revealed themselves. I think myself they have seriously
regretted the past and present daily expositions. Colonel Pitts is as
comfortably situated as possible under the circumstances. He has
the entire liberty of the prison bounds, with no restraint whatever on
his person or actions—sharing freely the hospitality of our
inestimable Sheriff and family. He has an excellent little parlor, well
fitted up for convenience and comfort.
I was one of the unfortunate jurors who tried the case, and from
my observations prior to, and during the progress of the trial, in my
humble opinion he met with strenuous ruling and injustice. Yet he
bore all with that fortitude and patience that ever characterizes a
truly good man; and, since his confinement, appears to be
composed and resigned to his fate. This has had a tendency to
influence a favorable impression in his behalf among the citizens of
Mobile. His friends in Mississippi, who are very numerous, are very
much incensed against the Court, and manifested their indignation
by public declarations in their public newspapers. His greatest grief
and mortification are in your behalf. He suffers more on your
account than he does on his own. He has daily the fullest assurance
and confirmation of the kindest feelings of our best people. And
what more could he want? It is looked on as one of those
misfortunes incident in life that sometimes cannot be avoided
honorably, and the only chance is to brave the storm fearlessly until
a more congenial sun will burst forth to his advantage, which will be
better appreciated and enjoyed had he never been in prison. I do
hope you have firmness and decision enough to fast adhere in
adversity—spurning the advice of those who would attempt to
prejudice you against him. Sympathizing with him under the clouds
of misfortune, rejoicing with him in prosperity, and yet be happy
together; and may you both live, not to exult, but witness the
repentance of your enemies, is the desire of your well wisher.
Very respectfully, yours,
John A. Bevell.
Miss Bowen availed herself of the very earliest opportunity to
acknowledge and to reply to this valuable communication, in which
will be found some statements well worthy of record.