Cyber Observations from a CISO Village Elder

“By thinking in a more sophisticated, analytical way about what constitutes good behavior and anomalous behavior, you get a much higher fidelity of alerts.”
Insider Risk – Where do Enterprises Stand and Where are They Going?

“Identity is about establishing trust, while insider risk is what happens when the trust chain is broken. That trust chain might be someone to whom you have willingly given credentials or a trusted employee who has shared credentials or, worse, an impersonator who has stolen credentials.”