Podcasts · All Things Internal Audit
Insider Threat Management: Connecting the Dots Before an Incident
· 34 min · S3 E99
Episode Insider Threat Management: Connecting the Dots Before an Incident
The Institute of Internal Auditors Presents: All Things Internal Audit
In this episode, Sanjay Vadlamani talks with Yvette Adams about how insider threats extend beyond malicious employees. They discuss negligent, malicious, and compromised insiders, along with the ways AI, remote work, cloud applications, and expanding access have increased organizational risk. The conversation also covers behavior monitoring, employee privacy, access management, offboarding, multidisciplinary risk teams, and the importance of connecting information across organizational silos before a threat becomes an incident.
• HOST:
• Sanjay Vadlamani, CIA, CISA, CRISC Senior Manager, Internal Audit, PayJoy
• GUEST:
• Yvette Adams, CIA, CRMA Director of Enterprise Risk Management, Zions Bancorporation
KEY POINTS:
• Introduction [00:00–00:00:38] • The Three Types of Insider Threats [00:00:39–00:03:19] • How AI, Remote Work, and Cloud Applications Increase Risk [00:03:20–00:06:52] • IIA Membership [00:06:53–00:07:38] • Balancing Employee Monitoring, Privacy, and Trust [00:07:39–00:11:13] • Indicators of Insider Risk [00:11:14–00:15:16] • The FinWise Bank Incident and Offboarding Risk [00:15:17–00:18:48] • Connecting Information Across Organizational Silos [00:18:49–00:22:47] • Five Elements of a Mature Insider Risk Program [00:22:48–00:26:40] • Lessons From the Tesla Insider Threat Case [00:26:41–00:28:56] • Understanding the Insider Threat Life Cycle [00:28:57–00:30:07] • Employee Self-Reporting and Where Organizations Should Start [00:30:08–00:33:40] • Closing [00:33:41–00:33:51]
IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources:
• Global Practice Guide: Auditing Insider Threat Programs • Insider Threat Leading Practices • Insider Threat Assessment Using NIST Cybersecurity Framework • All Things Internal Audit Tech: Identity & Access Management • Understanding Insider Threats • IIA Membership
Visit The IIA's website or YouTube channel for related topics and more.
Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
Links in the notes 15
- https://www.linkedin.com/in/sanjay-vadlamani/
- https://www.linkedin.com/in/yvette-adams-cia-crma-pmp-8a71482b/
- https://www.theiia.org/en/content/guidance/recommended/supplemental/practice-guides/auditing-insider-threat-programs/?utm_source=chatgpt.com
- https://www.theiia.org/en/standards/2024-standards/global-internal-audit-standards/?utm_source=google&utm_medium=cpc&utm_campaign=22100717904&utm_content=174821656482&utm_term=iia%20audit%20standards&gad_source=1&gad_campaignid=22100717904&gbraid=0AAAAADsnbmzrccWUNrcaezU3tqZKeGyb4&gclid=Cj0KCQjwucDBBhDxARIsANqFdr08xknZvGDSPOIRLC41f9Hk7-ycG2NaEy9tMs13xnjcEE9I-PeaowYaAkv0EALw_wcB
- https://www.theiia.org/en/standards/2024-standards/standards-knowledge-center/tools--resources/insider-threat-leading-practices/?utm_source=chatgpt.com
- https://www.theiia.org/en/standards/2024-standards/standards-knowledge-center/tools--resources/insider-threat-assessment-using-nist-cybersecurity-framework/?utm_source=chatgpt.com
- https://www.theiia.org/en/content/podcast/all-things-internal-audit/2025/ep-0062/?utm_source=chatgpt.com
- https://www.theiia.org/en/products/learning-solutions/on-demand/understanding-insider-threats/?utm_source=chatgpt.com
- https://www.theiia.org/en/membership/
- https://www.theiia.org/en/
- https://www.youtube.com/%40IIAGlobalHQ
- https://podcasts.apple.com/us/podcast/all-things-internal-audit/id1649563473
- https://open.spotify.com/show/1NB6ExNTE5RaarkTRaPBcy
- https://1984d534-f92f-4772-a722-6ac47400e67e.libsyn.com/
- https://www.deezer.com/us/show/5250577
Transcript
Shows are listed from Apple Podcasts' charts and directory, and Podcast Index where it is used. Every show and episode belongs to its publisher and plays from the publisher's own feed; this site hosts none of them. Explicit shows are for adult profiles only, and children’s profiles hear only children’s shows. More about this list.