Risk Assessment of Insider Threats Based on IHFACS-BN

Min Zeng, Chuanzhou Dian and Yaoyao Wei ()
Additional contact information
Min Zeng: School of Economics, Management and Law, University of South China, Hengyang 421001, China
Chuanzhou Dian: School of Economics, Management and Law, University of South China, Hengyang 421001, China
Yaoyao Wei: School of Economics, Management and Law, University of South China, Hengyang 421001, China

Sustainability, 2022, vol. 15, issue 1, 1-18

Abstract: Insider threats, as one of the pressing challenges that threaten an organization’s information assets, usually result in considerable losses to the business. It is necessary to explore the key human factors that enterprise information security management should focus on preventing to reduce the probability of insider threats effectively. This paper first puts forward the improved Human Factors Analysis and Classification System (IHFACS) based on actual enterprise management. Then, the enterprise internal threat risk assessment model is constructed using the Bayesian network, expert evaluation, and fuzzy set theory. Forty-three classic insider threat cases from China, the United States, and Israel during 2009–2021 are selected as samples. Then, reasoning and sensitivity analysis recognizes the top 10 most critical human factors of the accident and the most likely causal chain of unsafe acts. The result shows that the most unsafe behavior was not assessing employees’ familiarity with the company’s internal security policies. In addition, improving the organizational impact of information security can effectively reduce internal threats and promote the sustainable development of enterprises.

Keywords: human factors; insider threat; bayesian network; human factor analysis and classification system (search for similar items in EconPapers)
JEL-codes: O13 Q Q0 Q2 Q3 Q5 Q56 (search for similar items in EconPapers)
Date: 2022
References: View references in EconPapers View complete reference list from CitEc
Citations:

Downloads: (external link)
https://www.mdpi.com/2071-1050/15/1/491/pdf (application/pdf)
https://www.mdpi.com/2071-1050/15/1/491/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jsusta:v:15:y:2022:i:1:p:491-:d:1017415

Access Statistics for this article

Sustainability is currently edited by Ms. Alexandra Wu

More articles in Sustainability from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().