Above Security

Insider risk (from humans, and now their agents) is increasing. Shadow AI and undocumented business practices create risk outside established controls. Trusted employees can become threats overnight, due to coercion or compromise, or drift toward risky behavior over time. Agents can cause harm simply by doing what they're asked, with legitimate access and no malicious intent. Even before AI, the best tools often left analysts piecing together costly investigations that might never reach a clear conclusion. Adding AI features doesn't automatically make that process proactive. Closing that investigative gap is a central reason we backed @abovesec at Ballistic Ventures. I worked with @abovesec to develop the Insider Risk Maturity Model, a practical framework to help practitioners assess where their programs stand and decide what to do next. The response has been strong enough that we're taking it live. Bring the questions your team is working through. We'll discuss how to move beyond Level Three (of five), what to prioritize, and how to build a program that can act before harm occurs. Register for "Stuck at Level Three": above.security/webinar-phil-…

Another reminder that the new insider threat doesn't always go bad slowly but can go "boom" quickly. Modern multi-faceted, high speed insider risk management is becoming table stakes. @abovesec