When security incidents make the news, the damage has often already been done. In many cases, the cause is an employee or former employee who misused authorised access to systems or information. However, insider threats are not always malicious — they also result from mistakes, convenience or lack of awareness.
In the e-learning Insider Threats, employees gain a realistic and balanced understanding of internal security risks. The course explains that insider threats can originate from employees, former staff, contractors or business partners who have insider knowledge of systems, processes and controls.
The course clearly distinguishes between malicious and unintentional insider threats. Malicious threats may stem from resentment, financial stress or personal gain, such as stealing confidential data, committing fraud or sabotaging systems. Unintentional threats are caused by human error: oversharing on social media, bypassing security measures “to be helpful”, or mishandling sensitive information.
Through realistic, story-driven scenarios, participants learn how insider threats develop over time and which warning signs may appear. These include unusual working hours, requests for unnecessary access, behavioural changes, or excessive downloading and copying of data. The course emphasises that this is not about mistrust, but about awareness and responsibility.
The course also focuses on prevention and response. Participants learn why following procedures matters, why sharing credentials is never acceptable and how to act safely when something feels off. Clear guidance is provided on when and how to report concerns and who to contact.
This e-learning shows that insider threats are a serious risk, but that early detection and correct action can significantly limit damage.
What will participants learn?
After completing this course, participants will:
- understand what insider threats are
- recognise the difference between malicious and unintentional threats
- identify warning signs and unusual behaviour
- understand the importance of procedures and access controls
- know how to act safely when concerns arise
- report suspected incidents appropriately
Who is this course for?
This course is suitable for:
- all employees, regardless of role or seniority
- organisations aiming to reduce human-related security risks
- teams embedding long-term security awareness
- employees without technical or legal expertise
Why this course is relevant right now
Research shows that insider threats are more likely than external attacks and cause significant financial damage. Raising awareness among employees is one of the most effective ways to reduce this risk.