bad apples

Arieanna over at Laptop Security blog brought my attention to the InfoWorld Zero Day Security blog.  The reason? The posting of how to spot a spy!

The list in itself is not new, nor is the trade. Similar lists and warnings exists for the corporate world too. And I believe these are important, as the world is not as ethical as we would love it to be. Personal profit and status is found to be key for many, and if this can be achieved by selling off some information. That is easily done without much afterthought.  

So lists like these needs attention, and should be a part of the awareness training internally. One challenge is of course that distributing lists like this also makes it easier for the spy to counter the discovery. After all, if you are making a profit of selling off information, you are stupid to show it off in public. And the dangerous spies are all but stupid.

Another important point is to understanding the human mind. Let's assume you are a senior manager in a R&D energy company. You have access to important information about new products and ventures. Then, out of the blue, you are laid off or moved from your job to another part of the company. Against your will. It is very easy to bring with you the information you have. It is probably also very tempting. Especially if the information have value - to the press, to competitors, to the government or to customers.  

Somehow, many organizations seems to forget that moving around resources without their consent establishes unhappiness. And unhappy employees - at all levels - are a well known risk.

My advice is to establish or refurbish routines regarding employment. Also make sure that the HR department is able to create and cater a positive flow in the corporation. Understand the emotions involved when people are moved around without understanding why. If in doubt, ask for advice from specialists in change.

Most importantly - know your industry - some industries are more easy targets than others.