Act one ยท the insider

A threat is anything that causes
business impact. Malice is optional.
$0.0Ma year: the average cost of insider risk

Insider one

The human

  • bounded by hours and skills
  • an HR policy, and colleagues
  • most stop when they see they are causing harm

Insider two

The code

  • static: does what it was written to do
  • even a worm carries its logic with it
  • it cannot improvise

Neither

The agent

  • a reasoning engine in a loop, with tools
  • every language, every schema, every API
  • writes the connector it lacks, tries again
  • machine speed; malice optional
Ponemon Institute and DTEX Systems, 2025 Cost of Insider Risks Global Report (average annual cost across the organisations surveyed)