MANAGING SECURED ENVIRONMENTS Assignment, MU, Malaysia A successful threat management strategy can reduce the risk posed by a person of concern, prevent an insider incident

Surveys indicate that many workers are reluctant to report unethical practices, including stealing in the workplace. Although a law was passed to counter unethical corporate behavior and protect workers who report unethical activities, many employees still face the loss of their jobs or ridicule if they blow the whistle on corporate misconduct(Spherion, 2006)

Further, it has been reported that nearly 25% percent of young workers aged 18 to 24 do not believe that stealing office supplies for personal use is wrong. Many steal employer property, including pens, pencils, paper, self-adhesive notepads, and paper clips without regard to the activity’s illegality.

Employee theft costs American businesses over $40 billion each year.(Wulfhorst, 2006) Unethical behavior, dishonesty, and theft in the workplace often occur in a gradual incremental process. Theft, in particular, stems from a complex set of causes. Foremost among them is simply that an opportunity to steal arises, because chances of getting caught are low.

Additional causes include low workforce morale, employees’ sense that they are being underpaid and minimal consequences for getting caught stealing(Walsh, 2000)

As seemingly insignificant misconduct and theft go undetected, perpetrators often rationalize larger transgressions. Even high-level executives can become tempted to steal. Consider Dale Frantz, the former chief information officer of Auto Warehousing Company.

Frantz embezzled more than $500,000 from his company during 2007-2009 and was sentenced to nearly 6 years in prison. He used a number of strategies to steal the funds, including writing up fraudulent invoices for expense reports and changing legitimate reports to maximize his reimbursements. In addition, he used company funds to buy computer equipment that he resold on the Internet.

Instruction :

Discuss in a group the following questions

Question :

A successful threat management strategy can reduce the risk posed by a person of concern, prevent an insider incident, and protect the organization and its people. As a team in security department, you are required to build an insider threat mitigation programfor your company.

1. Plan(Prevent insider threat)
2. Management responsibility
3. Establish goals/objective
4. Organize and equipment(physical security)
5. Detecting and identifying insider threats
6. Threat management team

• Assess insider threats

1. Trainand execute
2. Suggest ways to execute the plan
3. Eg : training for employees
4. Evaluation and Improvement
5. Audit–once a year
6. Compliance–ways to make sure ur staff follow ur plan/procedure?

Answer

Request Answer of this Assignment