Michael Theis - DataBreachToday

Best Practices for Mitigating Insider Fraud

Presented by Maggie Calle , Michael Theis • August 21, 2019

The CERT Insider Threat Center at Carnegie Mellon University is one of the world's leading authorities on detecting insider fraud, and it has just released Version 6 of its Best Practices to Mitigating Insider Threats. As part of this research, the center addresses how to detect and prevent insider fraud, as well as...

Insider Threat Detection: Lessons From the Trenches Based on Real Insider Cases

Presented by Michael Theis • October 3, 2017

This session shares the empirical findings of the CERT Insider Threat Center's more than 15 years of research into both malicious and unintentional insider threats. The presentation shows how the insider threat is pervasive in all sectors, both private and public, and how most organizations have been forced to deal...

We've Been Breached: Now What? Working with Law Enforcement, Regulators and Other Third Parties

Presented by Kenrick Bagnall , Luis Cerritos , Ruth Promislow , Michael Theis • August 24, 2017

Too many organizations continue to address breach response from a reactive mode - having a crude disaster-recovery plan in place in case something "does" happen, rather than accepting that something "will" happen and proactively preparing for it. In this session, a panel of legal, technical and law enforcement experts...

Insider Threat Detection: Lessons from the Trenches Based on Real Insider Cases

Presented by Michael Theis • July 28, 2017

This session shares the empirical findings of the CERT Insider Threat Center's more than 15 years of research into both malicious and unintentional insider threats. The findings demonstrate how pervasive the insider threat is in all sectors, both private and public. The session also outlines what types of threats are...

Insider Threat Detection: How to Develop a Successful Program

Presented by Michael Theis • June 1, 2017

What are the biggest threats to your organization's data? Recent media attention to high-profile cyberattacks would lead an organization to think external threats are its only concern. Unfortunately, this misconception allows another significant threat to your organization's critical assets to stay completely under...

Insider Threat: Is Anyone Paying Attention?

Presented by Michael Theis • October 26, 2016

How prevalent are incidents of damage perpetuated by trusted insiders within the healthcare industry? In this session, an expert from Carnegie Mellon University's CERT Insider Threat Center will share results of its more than 15 years of empirical research into incidents of fraud, information technology sabotage,...

Insider Threat Detection: How to Develop a Successful Program

Presented by Michael Theis • September 9, 2016

What are the biggest threats to your organization's data? Recent high-profile cyberattacks would lead an organization to believe that its external threats are the most concerning. Unfortunately, this misconception allows another significant threat to your organization's critical assets to remain completely under the...

Toronto Summit - Closing Panel and Look Ahead

Presented by Tracy Kitten , Richard Parry , Randy Sabett , Robert Schwentker , Michael Theis • September 9, 2016

This panel will review some of the key themes discussed during the first day of the summit, and foreshadow how those key themes and others will be carried over into the next day. Which sessions will be hot, and how will tomorrow's speakers expand on the topics raised today?Additional Summit Insight:Hear from more...

Insider Threat Detection: How to Develop a Successful Program

Presented by Michael Theis • July 11, 2016

What are the biggest threats to your organization's data? Recent media attention to high-profile cyberattacks would lead an organization to think external threats are its only concern. Unfortunately, this misconception allows another significant threat to your organization's critical assets to stay completely under...

Insider Threat Detection: How to Develop a Successful Program

Presented by Michael Theis • May 13, 2016

What are the biggest threats to your organization's data? Recent media attention to high-profile cyberattacks would lead an organization to think external threats are its only concern. Unfortunately, this misperception allows one of the biggest threats to your organization's data to stay completely under the radar the...

Incident Response - Practice Makes Perfect - Before an Incident

Presented by Michael Theis • October 27, 2015

The absolute worst time to develop a breach response plan is directly after you have discovered a breach. The absolute best way to have your response team fail is to have them untrained on rarely practiced procedures while being overly reliant upon expensive, improperly configured technology. It is proven that humans...

Insider Threat Detection: How to Develop a Successful Program

Presented by Michael Theis • October 27, 2015

What are the biggest threats to your organization's data? Recent media attention to high-profile cyberattacks would lead an organization to think external threats are its only concern. Unfortunately, this misperception allows one of the biggest threats to your organization's data to stay completely under the radar -...

Insider Threat Detection: How to Develop a Successful Program

Presented by Michael Theis • October 20, 2015

What are the biggest threats to your organization's data? Recent media attention to high-profile cyberattacks would lead an organization to think external threats are its only concern. Unfortunately, this misperception allows one of the biggest threats to your organization's data to stay completely under the radar -...

Insider Fraud Detection: The Appliance of Science

Presented by Michael Theis • August 6, 2015

See the startling results of meticulous analysis of hundreds of real-life insider attacks from the team at Carnegie Mellon University, where the CERT (Computer Emergency Response Team) function was created. The analysis results clearly indicate that, contrary to the majority of headlines, stealthy insiders pose a huge...

Incident Response - Practice Makes Perfect - Before an Incident

Presented by Cris Ewell , Michael Theis • July 16, 2015

The absolute worst time to develop a breach response plan is directly after you have discovered a breach. The absolute best way to have your response team fail is to have them untrained on rarely practiced procedures while being overly reliant upon expensive, improperly configured technology. It is proven that humans...