The Effect of Insider Threat in Management Information Security

Ekanem; Sandra Samuel; Bassey; E. Bassey; Paul; Itoro Nsikan; Imojara; Vivian Osuma; Ekesiobi; Chukwuemeka

doi:10.56201/jafm.vol.12.no11.2026.p17.26

📄 Download Paper

The Effect of Insider Threat in Management Information Security

Ekanem, Sandra Samuel, Bassey, E. Bassey, Paul, Itoro Nsikan, Imojara, Vivian Osuma, Ekesiobi, Chukwuemeka

Abstract

The growing prevalence of insider threat has raised serious concern among organization worldwide because insiders possessed legitimate access privileges, making their actions difficult to detect and prevent. In the modern world, management information security and its application has become an emerging topic of great important due to the increasing reliance on technology for business operations. Therefore, the study examined the effect of insider threat in Management Information Security . The Specific objectives were to examined the effect of malicious insider activities, employee negligence, unauthorized access and privilege abuse, lack of security awareness on Management information security. The study is anchored on the theory of planned Behaviour developed by Ajzen (1991). The study employed a conceptual review method. Based on the conceptual review method, it was found that malicious insider activities, employee negligence, unauthorized access and privilege abuse, lack of security awareness have positive effect on Management information security. The study concluded that effective management security requires organizations to address both technological vulnerabilities and human behavioural factors. The study recommended that organizations should implement robust insider threat management system programmes that integrate continuous monitory, behavioural analytics, and risk assessment mechanisms to identify and mitigate malicious insider activities before they escalate into significant security breaches.

Keywords

insidermaliciousthreatsecurityvulnerabilities

References

Alharthi, R., & Regan, A. (2024). Insider threats and organizational cybersecurity resilience:Emerging challenges and mitigation strategies. Journal of Information Security and Applications, 78, 103624. Alneyadi, S., Sithirasenan, E., & Muthukkumarasamy, V. (2023). Managing insider threats through access control and behavioural monitoring. Computers & Security, 126,103098. Alshaikh, M. (2024). Human factors in cybersecurity: The role of security awareness and employee behaviour. Information & Computer Security, 32(1), 45-61. Bada, M., Sasse, A. M., & Nurse, J. R. C. (2023). Cyber security awareness campaigns: Why do they fail to change behaviour? Computers & Security, 129, 103215. Cappelli, D. M., Moore, A. P., & Trzeciak, R. F. (2023). The CERT guide to insider threats:How to prevent, detect, and respond to information technology crimes (2nd ed.).Addison- Wesley. Colwill, C. (2023). Human factors in information security: The insider threat perspective.Information Security Journal: A Global Perspective, 32(2), 77-89. Cybersecurity and Infrastructure Security Agency . (2024). Cybersecurity strategic plan 2024-2026. U.S. Department of Homeland Security. D'Arcy, J., & Greene, G. (2023). Security culture and employee compliance with information security policies. Information Systems Journal, 33(4), 812-835. European Union Agency for Cybersecurity . (2024). ENISA threat landscape 2024.ENISA Publications Office. Greitzer, F. L., & Hohimer, R. E. (2023). Modeling human behaviour to anticipate insider attacks. Journal of Strategic Security, 16(2), 21-38. IBM. (2024). Cost of a data breach report 2024. IBM Security. Information Systems Audit and Control Association . (2024). State of cybersecurity 2024. ISACA. International Organization for Standardization . (2022). ISO/IEC 27001:2022Information security, cybersecurity and privacy protection—Information security management systems—Requirements. ISO. Legg, P. A., Buckley, O., & Goldsmith, M. (2024). Insider threat detection and mitigation in modern organizations. Computers & Security, 134, 103401. National Institute of Standards and Technology . (2024). Cybersecurity framework 2.0. U.S. Department of Commerce. Nurse, J. R. C., Buckley, O., Legg, P.A., Goldsmith, M., Creese, S., Wright, G., & Whitty, M.(2023). Understanding insider threat: A framework for characterization and analysis.Journal of Information Security and Applications, 72, 103356. Parsons, K., McCormac, A., Butavicius, M., Pattinson, M., & Jerram, C. (2023). Determining employee awareness using the human aspects of information security questionnaire (HAIS-Q). Computers & Security, 125, 103042. Rose, S., Borchert, O., Mitchell, S., & CConnelly, S. (2023). Zero trust architecture (Special Publication 800-207). National Institute of Standards and Technology. Salem, M. B., Stolfo, S. J., & Keromytis, A. D. (2023). Insider attack and cyber security risk management in organizations. ACM Computing Surveys, 56(4), 1-29. Sasse, M. A., & Flechais, I. (2023). Usable security: Why do we need it and how do we get it?O’Reilly Media. Von Solms, R., & Van Niekerk, J. (2023). From information security to cybersecurity:Contemporary perspectives on organizational protection. Computers & Security, 128,103182. Whitman, M. E., & Mattord, H. J. (2022). Principles of information security (7th ed.). Cengage Learning

The Effect of Insider Threat in Management Information Security

Abstract

Keywords

References

More Articles from JOURNAL OF ACCOUNTING AND FINANCIAL MANAGEMENT