Insider threats are a growing concern for businesses globally. According to Gurucul’s 2023 Insider Threat report, 74% of organisations say insider attacks have become more frequent, and more than half have experienced an insider threat in the last year.
As many major companies are currently going through a period of redundancies, one type of insider threat they need to watch out for in particular is the disgruntled ex-employee. It’s crucial that they have the right security processes in place to prevent staff becoming a threat once they leave the business. Here are a few tips for reducing the risk.
End the relationship respectfully
Firstly, it’s important that the HR process for terminating contracts is designed to be thoughtful and respectful. The conversation should happen in private, the reasons for ending the relationship need to be made clear, and the termination process (e.g., last day of work, final pay) should be laid out in a formal exit interview. Having these clear and open discussions, should limit the chances of the employee feeling mistreated and wanting to take action against the company.
Monitor user behaviour
Before the employee leaves the company, where possible you should try to monitor their behaviour to detect anomalies, such as the downloading of sensitive information, copying files or logging onto the network at unusual times.
Disable user accounts and remove access
Once the employee has left the company, ensure all of their user accounts are disabled and remove any access to the corporate network and building. Ensure you have a complete inventory of user accounts that you can use as a checklist. Also disable the user’s access to their work email account and reset their passwords, including any shared passwords.
Collect company property
Make sure you collect anything owned by the company – such as laptops, mobile phones, security passes and credit cards – to prevent them being used to access confidential information.
Notify the team
To ensure that confidential information is not unwittingly shared, make sure all employees and managers are aware that the employee will be leaving the company. Again, this news should be shared in a respectful way that doesn’t embarrass the departing employee.