Operationalising a framework for organisational vulnerability to intentional insider threat: the OVIT as a valid and reliable diagnostic tool

Abstract

There are several models and frameworks that assist in understanding insider threat. However, practical limitations in operationalising these models include them being overly complex, too subjective, cumbersome, or lacking dimensionality. In response, this study looks to operationalise a practice-based framework for determining organisational vulnerability to intentional insider threat. The study reports on an Exploratory Factor Analysis (EFA) to determine the validity and reliability of the Organisational Vulnerability to Intentional Insider Threat (OVIT) diagnostic tool. The EFA results (construct validity and reliability statistics) show promise for the use of the OVIT in operationalising intentional insider threat detection. Limitations of the study are presented and future research progressing this exploratory study are encouraged.

Keywords:

• Insider threat
• organisational vulnerability
• risk management
• assessment
• exploratory factor analysis

Data availability statement

The data that support the findings will be available from the corresponding author, JB, upon reasonable request following a 6 month embargo from the date of publication to allow for commercialization of research findings.

Disclosure statement

No potential conflict of interest was reported by the author(s).