Unmasking the Unintentional Insider Threat: When Incompetence Becomes a Security Risk

The notion that “insider threats” are mostly wilful saboteurs motivated by clear, malicious agendas is largely a fiction trope. Sure, such people exist but the research suggests that the most common type of insider threat activities comes from negligence, not intention. Xavier’s horrible job application story should help explain how this happens. 

For context, Xavier is a young man working in logistics. He’s what we call a “small shop chief” … that is, a functional lead who provides limited direction to a team but who holds no administrative or supervisory authority over them. Xavier works in a large warehouse, overseeing the site’s receiving function. He enjoys some elements of his job but has been keeping his eyes open for an opportunity to get him out of his unairconditioned facility before the next brutal Texas summer comes around. 

Many of Xavier’s pals at the local Warhammer store happen to work logistics at a different company. One of them recently mentioned between matches that one of their techs had quit. Would Xavier be interested taking a role that involved sitting at a desk 90%+ of the day? A job that had set hours and little need for mandatory overtime? Why, yes! Yes, he would. 

Xavier applied for the gig. He decided he’d definitely sit the interview (assuming he got one) so he could see the new facility, meet the office staff, and evaluate if he’d be happy working there. He let his current boss know that he might be taking time off to interview. Nothing personal; just keeping his options open. Xavier’s supervisor wholeheartedly supported the idea and pledged his support. 

Encouraged, Xavier applied for the office gig and settled in to wait. His prior experiences applying for jobs online was overwhelmingly negative. It’s common in the USA that fewer than 10% of companies ever communicate with their applicants beyond an automated email that confirms their CVs was uploaded. Xavier had grown used to companies “ghosting” him.