全球智库信息集成服务系统

• Definitional ambiguity persists on what constitutes a white-collar crime or insider threat. As a result, data sets are sometimes incomparable, which hampers the discovery of causal mechanisms.
• Understanding indicators, motivations and characteristics for white-collar criminals and malicious insiders means understanding the threat type, the psychology of the perpetrator and changes in the threat landscape.
• Because of the sociotechnical nature of both white-collar crime and insider threats, the profile of the criminal and the offence is constantly changing.
• Rules-based management approaches are important, but self-regulatory approaches are more effective, as they foster a positive work environment.
• Positive deterrence complements the use of negative deterrence by improving employees' satisfaction, performance and commitment to the organisation.

In this report, the authors describe the recent literature on insider threats and white-collar crime in non-government organisations and industries and identify management strategies used to counter them, both internationally and in the Australian context. The objective is to provide the Australian Department of Defence and the broader research and practitioner community with (1) access to sources that will generate greater understanding of the depth and breadth of the potential risks of insider threats and white-collar crime and (2) a scholarly evidence base on which to build strategies for better detection, management and prevention.

The authors analyse and evaluate recent Australian and international sources on insider threats and white-collar crime, concentrating on articles, reports and accounts that help define these threats and provide important context for management and mitigation strategies and emerging risks.

Key findings include challenges with identifying causal mechanisms due to the paucity of publicly available data; the importance of devising management strategies that engage with human and technical dimensions; the relative efficacy of self-regulatory approaches that generate a strong security culture; and the importance of recognising ethical and privacy concerns that can arise with increased use of new technologies, such as cybervetting.

• Chapter One

  Introduction

• Chapter Two

  Context and Definitions

• Chapter Three

  Effective Management in the Face of Threats

• Chapter Four

  Emerging Risk

• Chapter Five

  Discussion

• Appendix

  Sources for Best Practice Lists