The DOI matches its Crossref record; 2 of the 2 references it cites were found in a registry or an index.
Human factors in information security: The insider threat – Who can you trust these days?
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“Designed at lowering exposure to semantic attacks, well maintained policy and organisational procedures help to mitigate and significantly lower the risk of a potential exploit occurring, without relying on the technical capabilities of users [Mitnick and Simon 2001; Hinson 2008; Colwill 2009].”
From A Taxonomy of Attacks and a Survey of Defence Mechanisms for Semantic Social Engineering Attacks (2016) · cites this paper as Colwill 2009
Citations
Cites
Dealing with the Malicious Insider
Jones, A., & Colwill, C. (2006) · Australasian Journal of Paramedicine · doi:10.4225/75/57b562dab876e · Cited by 19
Self-citationNoonan, T. E., & Archuleta, E. G. (2008) · Cited by 9
Research works printed but not linked: 3
- Raywood, 2008, Companies being hit by moles who are employed by gangs to steal data, Secure Computing Magazine
- Royds, 2009, Virtual battlefield, CIR Magazine
- Wilding, 2007, Insiders are the biggest enemy, Strategic Risk Magazine
Cited by
Sorted by citations
Items 201–300 of 319
The Role of Education and Awareness in Tackling Insider Threats
Smyth, S. J., Curran, K., & McKelvey, N. (2019) · Advances in information security, privacy, and ethics book series · doi:10.4018/978-1-5225-7847-5.ch003 · Cited by 2
Syahrial, H., Prabowo, H., Budiastuti, D., & Gaol, F. L. (2019) · Lecture notes in electrical engineering · doi:10.1007/978-981-13-1799-6_41 · Cited by 2
Conceptual and model support for the development of an innovative-active university
International Science Group, Ponomarenko, V., Rayevnyeva, O. V., & Yermachenko, V. (2021) · Іnternational Science Group eBooks · doi:10.46299/978-1-68564-524-3 · Cited by 2
Improving Information Security Training: An Intercultural Perspective
Plachkinova, M., & Andrés, S. (2015) · Journal of the Association for Information Systems · Cited by 2
Towards metamodel-based approach for Information Security Awareness Management
Jama, A. Y., Siraj, M. M., & Kadir, R. (2014) · International Symposium on Biometrics and Security Technologies · doi:10.1109/isbast.2014.7013141 · Cited by 2
A Framework to Defense against Insider Attacks on Information Sources
Asgari, R., & Atani, R. E. (2013) · International Journal of Managing Public Sector Information and Communication Technologies · doi:10.5121/ijmpict.2013.4201 · Cited by 2
GRID INFORMATION SECURITY FUNCTIONAL REQUIREMENT
Ling, A. P. A., & Mukaidono, M. (2011) · Grid Computing · Cited by 2
Sype, Y. S. V. D., Guislain, J., Seigneur, J.-M., & Titi, X. (2017) · Law, governance and technology series · doi:10.1007/978-3-319-50796-5_9 · Cited by 2
Information Systems Security Training in Organizations: Andragogical Perspective
Offor, P. I., & Tejay, G. P. S. (2014) · Journal of the Association for Information Systems · Cited by 2
Potgieter, M., & van Niekerk, J. (2013) · SAIEE Africa Research Journal · doi:10.23919/saiee.2013.8531868 · Cited by 2
Insider threats to critical infrastructure: A typology
Reveraert, M., Sas, M., Reniers, G., Hardyns, W., & Sauer, T. (2024) · Elsevier eBooks · doi:10.1016/b978-0-323-99330-2.00012-x · Cited by 2
Information security risk management and incompatible parts of organization
Talabeigi, E., & Naini, S. G. J. (2016) · Journal of Industrial Engineering and Management · doi:10.3926/jiem.2032 · Cited by 2
Mitigating Knowledge Leakage Risk in Organizations through Mobile Devices: A Contextual Approach
Agudelo, C. A., Bosua, R., Ahmad, A., & Maynard, S. B. (2016) · Research Online (University of Wollongong) · Cited by 2
Trusted measurement of behaviors for the Internet of Things
Ye, T., Ning, Z., Zhang, J., & Xu, M. (2020) · Alexandria Engineering Journal · doi:10.1016/j.aej.2020.11.002 · Cited by 2
A study of insider threat behaviour: developing a holistic insider threat model
Munshi, A. M. (2013) · eSpace (Curtin University) · Cited by 2
Employees' Role in Improving Information Systems Security
Aliti, A., & Akkaya, D. (2011) · KTH Publication Database DiVA (KTH Royal Institute of Technology) · Cited by 2
Roelfzema, N. H. (2026) · Research Output (Edinburgh Napier University) · doi:10.17869/enu.181044 · Cited by 2
Inside Abuse: A Threat to Banks’ Stability
Mustafa, I., & Jeffrey, E. O. (2021) · The International Journal of Business & Management · doi:10.24940/theijbm/2021/v9/i7/bm2107-034 · Cited by 1
Muhenda, M. B., & Kule, A. (2022) · Global Journal of Social Sciences Studies · doi:10.55284/gjss.v8i1.640 · Cited by 1
Obiri‐Yeboah, K., Odei-Lartey, E. O., & Kwarteng, K. O. (2014) · Journals & Books Hosting (International Knowledge Sharing Platform) · Cited by 1
A New Behavior Measurement for Cloud Computing
Liang, P., Jiang, W., Gong, B., -, M. D., & Tian, L. (2012) · International Journal of Advancements in Computing Technology · doi:10.4156/ijact.vol4.issue14.2 · Cited by 1
Social Engineering in Information Security Breaches and the Factors That Explain Its Success
Lackram, J., & Padayachee, I. (2018) · Advances in information security, privacy, and ethics book series · doi:10.4018/978-1-5225-4763-1.ch001 · Cited by 1
Scheme for Selection of Deceptions as a Countermeasure for Insider Threats
Okumura, S., Amagasa, T., Shibata, T., Yamamoto, T., Yamanaka, T., Ohki, T., & Nishigaki, M. (2023) · Lecture notes on data engineering and communications technologies · doi:10.1007/978-3-031-46784-4_10 · Cited by 1
Yesirlili, U., & Günay, G. Y. (2023) · Ankara Hacı Bayram Veli Üniversitesi Turizm Fakültesi Dergisi · doi:10.55931/ahbvtfd.1347580 · Cited by 1
Training on Social Media Cybersecurity Skills in the Healthcare Context
Fernández-Tárraga, M., Tudela, A. D. C., Nespoli, P., García-Alfaro, J., & Mármol, F. G. (2024) · Communications in computer and information science · doi:10.1007/978-3-031-55829-0_1 · Cited by 1
When Your Thing Won’t Behave: Security Governance in the Internet of Things
Brennecke, M., Fridgen, G., Jöhnk, J., Radszuwill, S., & Sedlmeir, J. (2024) · Information Systems Frontiers · doi:10.1007/s10796-024-10511-z · Cited by 2
Nation-State Cyber Attacks on Critical Infrastructure
Aleke, N. T., Zziwa, I. L., & Opoku-Appiah, K. (2024) · Advances in information security, privacy, and ethics book series · doi:10.4018/979-8-3373-1102-9.ch005 · Cited by 1
Tsegaye, T., & Flowerday, S. (2014) · International Journal for Information Security Research · doi:10.20533/ijisr.2042.4639.2014.0056 · Cited by 1
INSIDER THREAT DETECTION AND MITIGATION TECHNIQUES
(2017) · Scientific Bulletin of Naval Academy · doi:10.21279/1454-864x-17-i1-060 · Cited by 1
Over-claiming as a Predictor of Insider Threat Activities in Individuals
Zavoyskiy, S., Rizzo, N. D., Goel, S., & Williams, K. (2018) · Journal of the Association for Information Systems · Cited by 1
Rîndașu, S.-M. (2019) · Audit Financiar · doi:10.20869/auditf/2019/154/012 · Cited by 1
Privacy in Cloud-Based Computing
Ahmed, M., & Sarkar, N. I. (2020) · Advances in information security, privacy, and ethics book series · doi:10.4018/978-1-7998-3817-3.ch011 · Cited by 1
Kamarulzaman, M. S., Hussin, N., Shoid, M. S. M., Rahman, A. A., Ahmad, M. N., & Aziz, R. A. (2020) · International Journal of Academic Research in Business and Social Sciences · doi:10.6007/ijarbss/v10-i11/8185 · Cited by 1
Żywiołek, J., & Abbas, A. A. (2021) · System Safety Human - Technical Facility - Environment · doi:10.2478/czoto-2021-0007 · Cited by 1
Martyshkin, A. I., & Pashchenko, D. V. (2021) · International Russian Automation Conference (RusAutoCon) · doi:10.1109/rusautocon52004.2021.9537338 · Cited by 1
The Role of Education and Awareness in Tackling Insider Threats
Smyth, S. J., Curran, K., & McKelvey, N. (2021) · IGI Global eBooks · doi:10.4018/978-1-6684-3698-1.ch013 · Cited by 1
Coleta de dados pessoais e paradoxo da privacidade: um estudo entre usuários de aplicativos móveis
Hsing, C. W. (2016) · doi:10.11606/t.12.2016.tde-03062016-124303 · Cited by 1
News Censorship in Social Networks: A Study of Circumvention in the CommentspherePreprint
Schwartz, D. G., Silverman, G., & Yahav, I. (2015) · SSRN Electronic Journal · doi:10.2139/ssrn.2604910 · Cited by 1
Jaishankar, K. (2026) · doi:10.1093/9780197858301.003.0337 · Cited by 1
End-user IT Security Policy Compliance: A Confidence-Building Measures Approach
Ayaburi, E. W. Y. (2015) · Journal of the Association for Information Systems
Carneiro, L. E. D. S., & Almeida, M. B. (2013) · Encontros Bibli Revista Eletrônica de Biblioteconomia e Ciência da Informação · doi:10.5007/1518-2924.2013v18n37p175
The use of computer vision technologies to augment human monitoring of secure computing facilities
Potgieter, M., & van Niekerk, J. (2012) · Information Security for South Africa · doi:10.1109/issa.2012.6320450
Vulnerability-threats assessment for enterprise network
Mohammed, A., Nor, S. M., & Marsono, M. N. (2013)
Rock Tale Drilling Prototype : An Innovative Design for Investigation of Rock Properties
Tomar, R., & Kumbhakar, D. (2015) · International Journal of Science and Engineering Applications · doi:10.7753/ijsea0406.1001
Shahri, A. B., Ismail, Z., & Rahim, N. Z. A. (2013) · Advances in intelligent systems and computing · doi:10.1007/978-3-642-36981-0_20
Information System Security Model for ICT Departments
Bojmaeh, H. Y. (2015) · International Journal of Science and Engineering Applications · doi:10.7753/ijsea0406.1005
Robustness against strategic attacks
Lászka, Á. (2014)
A Cross-Layer Security Analysis for Process-Aware Information SystemsPreprint
Leitner, M., Ma, Z., & Rinderle‐Ma, S. (2015) · arXiv (Cornell University) · doi:10.48550/arxiv.1507.03415
An Ex Ante Evaluation Method for Assessing a Government Enforced Security Measure
Shim, W. (2015) · Han-guk jeonja georae hakoeji · doi:10.7838/jsebs.2015.20.4.241
What’s so Unique about Cyber Security?
Doyle, K., Dooly, Z., & Kearney, P. (2015) · Communications in computer and information science · doi:10.1007/978-3-319-25360-2_11
Organizaciona kultura kao ne-tehnički aspekt bezbjednosti informacija
Mirković, B. (2015) · International Scientific Conference Sinteza · doi:10.15308/synthesis-2015-321-326
A Framework to Manage Sensitive Information during its Migration between Software Platforms
Ajigini, O. A., van der Poll, J. A., & Kroeze, J. H. (2016) · DigitalCommons - Kennesaw State University (Kennesaw State University)
Ontologias sobre Segurança da Informação em Biomedicina: Tecnologia, Processos e Pessoas.
Carneiro, L. E. D. S., & Almeida, M. B. (2011)
PLayPUF: Programmable Logically Erasable PUFs for Forward and Backward Secure Key Management.
Jin, C., Xu, X., Burleson, W. P., Rührmair, U., & van Dijk, M. (2015)
Imam, A. H. (2013) · ProQuest LLC eBooks
Offor, P. I., & Tejay, G. P. S. (2014)
Carneiro, L. E. D. S., & Almeida, M. B. (2013)
Kinyanjui, J. M. (2015) · University of Nairobi Research Archive (University of Nairobi)
Incentives for and Against Pervasive Monitoring Threats
Zia, S., & Alam, A. (2016) · International Journal of Computer Applications · doi:10.5120/ijca2016910234
Chantaratanapibul, T., & Utatham, A. (2013)
An Exploration Regarding Issues in Insider Threat
Lee, J., Eapen, A. M., Akbar, M. S., & Rao, H. R. (2016) · Advances in information security, privacy, and ethics book series · doi:10.4018/978-1-5225-1941-6.ch001
As redes sociais vão à bola: o papel social e mediático da informação interna no desporto
Pinheiro, F. (2015) · Revista Estudos do Século XX · doi:10.14195/1647-8622_15_8
Leveraging Biometrics for Insider Misuse Identification
Alruban, A., Clarke, N., Li, F., & Furnell, S. (2016) · International Journal on Cyber Situational Awareness · doi:10.22619/ijcsa.2016.100107
Information Security Behavior among Employees from the Islamic Perspective
Barzak, O. M., Molok, N. N. A., Talib, S., & Mahmud, M. (2016) · International Conference on Information and Communication Technology for the Muslim World (ICT4M) · doi:10.1109/ict4m.2016.051
Lopienski, S. (2010) · CERN Document Server (European Organization for Nuclear Research)
Investigation of Attributes that Influence the Insider Trust
hassan, R. B., Ismail, I., Kasim, S. B., Othman, M. R., & Ramlan, R. (2017) · International Journal on Advanced Science Engineering and Information Technology · doi:10.18517/ijaseit.7.5.3406
Jasińska, K., & Kaczmarski, M. (2018) · Management Sciences · doi:10.15611/ms.2018.1.04
Talebi, N., Ayaburi, E. W. Y., & Chakravarty, S. (2018) · Advances in knowledge acquisition, transfer, and management book series/Advances in knowledge acquisition, transfer and management book series · doi:10.4018/978-1-5225-5393-9.ch006
Insider Attack Analysis in Building Effective Cyber Security for an Organization
Dhavale, S. (2018) · Advances in digital crime, forensics, and cyber terrorism book series · doi:10.4018/978-1-5225-4053-3.ch013
Kurum İçi Saldırıların Tespiti ve Önlenmesi için Sunucu İzleme Uygulaması
Halil İbrahim, U. L. U. S., & Demirci, M. (2018) · Gazi Üniversitesi Fen Bilimleri Dergisi Part C Tasarım ve Teknoloji · doi:10.29109/gujsc.351365
Are Teammate Trust and Confidence Dissociable in Risk Intensive Human Machine Teaming?
Blitch, J. G., & Skinner, A. D. (2018) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-02053-8_106
de Araújo, W. J., Araújo, S. G. L., & Batista, R. R. (2018) · Informação & Informação · doi:10.5433/1981-8920.2018v23n2p596
Al-Mahri, M. (2018) · Northumbria Research Link (Northumbria University)
CYBER SECURITY AND DIGITALIZED FINANCIAL SYSTEM: A PARADIGM SHIFT IN GLOBAL MARKET
Mh, A., Hossain, M. S., & Uddin, M. H. (2019) · The Journal of Internet Banking and Commerce
Investigating the Information Perception Value (IPV) Model in Maintaining the Information Security
Tajuddin, S., Seyal, A. H., Masdi, N. B. M., & Siau, N. Z. (2019) · Advances in human resources management and organizational development book series · doi:10.4018/978-1-5225-8933-4.ch024
THE IMPACT OF SOCIAL MEDIA ON HUMAN RESOURCE INTERVENTION AND SOCIAL ENGINEERING
Andrabi, U. (2020) · Journal of Emerging Technologies and Innovative Research
TMSUI: A Trust Management Scheme of USB Storage Devices for Industrial Control Systems.
Yang, B., Feng, D., Qin, Y., Zhang, Y. A., & Wang, W. (2015)
Robot Networks and Their Impact on Cyber Security and Protection from Attacks: A Review
Hasan, D. A., & Tasji, L. F. (2021) · Lecture notes on data engineering and communications technologies · doi:10.1007/978-3-030-70713-2_69
Hughes-Lartey, K., Qin, Z., Botchey, F. E., & Dsane-Nsor, S. (2021) · Zenodo (CERN European Organization for Nuclear Research) · doi:10.5281/zenodo.18628801
Empowering Adolescents Through Instilling Information Security Culture in Zimbabwean Schools
Ruvinga, T. Z., Tsokota, T., Chipfumbu, C. T., & Nyambuya, P. T. (2021) · Advances in human and social aspects of technology book series · doi:10.4018/978-1-7998-8318-0.ch011
A Model of Human Factors in Cyber Security
Ebrahimi, M. (2021) · Advances in social networking and online communities book series · doi:10.4018/978-1-7998-8235-0.ch006
Privacy in Cloud-Based Computing
Ahmed, M., & Sarkar, N. I. (2021) · IGI Global eBooks · doi:10.4018/978-1-7998-8954-0.ch006
Mitigating cybersecurity insider threat in the hiring stage of the employee lifecyclePreprint
Ayodele, C. (2022) · doi:10.31234/osf.io/cmeur
Insider Attack Analysis in Building Effective Cyber Security for an Organization
Dhavale, S. (2019) · IGI Global eBooks · doi:10.4018/978-1-5225-8897-9.ch070
(2013) · Elsevier eBooks · doi:10.1016/b978-0-12-407191-9.09992-0
Stirnimann, S. (2021) · Springer eBooks · doi:10.1007/978-3-658-34631-7_3
Personality and Employees’ Information Security Behavior Among Generational Cohorts
Warrington, C., Syed, J., & Tappin, R. M. (2022) · Journal of Organizational Psychology · doi:10.33423/jop.v22i3.5647
Knowledge of Information Security Awareness and Practices for Home Users: Case Study in Libya
Asker, H., & Tamtam, A. (2023) · European Scientific Journal ESJ · doi:10.19044/esipreprint.2.2023p22
Modeling of Advanced Threat Actors: Characterization, Categorization and Detection
Villalón-Huerta, A. (2023) · RiuNet (Universitat Politècnica de València) · doi:10.4995/thesis/10251/193855 · Cited by 2
Carmody‐Bubb, M. (2023) · Springer eBooks · doi:10.1007/978-3-031-31929-7_23
Employees Information System Misuse: Insights from National culture and Criminological Theories
Mohammed, Y., Beshah, T., & Warkentin, M. E. (2022) · International Conference on Industrial Engineering and Operations Management (IEOM) · doi:10.46254/af03.20220123
Investigating and Managing Security Threats in Hospitals: Case Study
Bakkar, M. N. (2024) · Lecture notes in networks and systems · doi:10.1007/978-3-031-65522-7_49
Cyber Espionage and Cyber Defence
Herrmann, D. (2024) · Technology, peace and security · doi:10.1007/978-3-658-44810-3_5
Cârstea, C.-G., & Angheluță, V.-S. (2025) · Communications in computer and information science · doi:10.1007/978-3-031-79086-7_33
Kibii, S. W., Gemechu, T. F., & Kluchnikov, A. E. (2025) · Open Journal of Leadership · doi:10.4236/ojl.2025.141003
Cybersecurity and Cost ManagementPreprint
Agarwal, N., Chalwati, A., Trabelsi, S., Agarwal, S., & Sisodia, S. (2025) · SSRN Electronic Journal · doi:10.2139/ssrn.5167378
Al-Fadl, A.-A. M. A., Ibrahim, A. A. Y., & Eid, M. M. Z. (2025) · Journal of Lifestyle and SDGs Review · doi:10.47172/2965-730x.sdgsreview.v5.n04.pe06024
Metadata
- Authors
- Colwill, C.
- Affiliations
- BT Group (United Kingdom) (GB)
- Corresponding author
- Colwill, Carl
- Venue
- Information Security Technical Report
- Publisher
- Elsevier BV
- Published
- 2009-11
- Volume
- 14
- Issue
- 4
- Pages
- 186-196
- ISSN
- 1363-4127 (ISSN-L)
- OpenAlex
- W2083829472
- Cited by
- 319
- References
- 2
- Citations by year
- 2026: 10 · 2025: 12 · 2024: 21 · 2023: 15 · 2022: 14 · 2021: 26 · 2020: 24 · 2019: 28 · 2018: 30 · 2017: 14 · 2016: 19 · 2015: 31 · 2014: 28 · 2013: 24 · 2012: 9
- FWCI
- 19.39
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- Information Security Technical Report (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Social Sciences › Sociology and Political Science › Privacy, Security, and Data Protection
- Physical Sciences › Computer Science › Information Systems › User Authentication and Security Systems
- Keywords
- insider threats, information security, human factors, trust, loyalty and betrayal, outsourcing, security risk management, security risk assessment, compliance, employee behavior, security awareness, third-party security, organizational culture, economic uncertainty, BT
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review