Module 17 · 12:10 video + 10-question quiz
Insider Risk
The inside is a way in — and most of the time nobody meant it. The three faces of insider risk (careless, compromised, malicious) and the numbers behind them; the careless insider you can be on a Tuesday; how criminals recruit insiders and the tell they always give; what to do when you're asked (the Nevada rule: screenshot, keep the number, report it the same day); your login in somebody else's hands and why you never lend it; the malicious insider — rarer than the headlines, nearer than you'd think; the colleague who isn't (laptop farms, AI CVs, face-swapped interviews); leaving properly — what's yours and what's the company's; the law, briefly; reporting the behaviour, not the person; and why criminals go inside at all.
Loading your module video…
The scenario
Wednesday, 19:40 — a WhatsApp from a number you don't know: "a data research firm" pays R25 000 for a copy of the customer export you run every Monday. You already have access; nobody will ever know. You delete it. Thursday: "Forty thousand. One file. Your colleague in dispatch has already helped us." You don't reply — and you don't tell anyone. Three weeks later 2,400 customers get a very convincing invoice, and the investigation finds the same message on four phones. Including yours.
The habit this module drills
If you're asked, say so. If you're leaving, leave it. If you see it, say it.
After this module you can
- ✓Recognise the three faces of insider risk — careless, compromised and malicious — and see where you could be each one without meaning to.
- ✓Handle an approach — a bribe, a favour, a recruiter who wants a sample — by keeping the message and reporting it the same day.
- ✓Leave properly: know what's yours and what's the company's, and hand the rest back.
- ✓Report what you see, not who you suspect — knowing that a report made in good faith is protected.
What this module evidences: ISO/IEC 27001:2022 clause 7.3 (awareness) and Annex A control A.6.3 (information security awareness, education and training); POPIA Regulation 4(1)(e) (the Information Officer's duty to see that internal awareness sessions are held). The quiz result is recorded against your account, and passing it earns this module’s dated certificate.
Module 17 quiz
Ten “what would you do” scenario questions. Pass mark 80% — retake as often as you like. Pass it and this module’s certificate is issued in your name with the date; it is due again in twelve months. The quizzes and certificates come with a 12-month licence — for one person or for your company.
Loading…