Inside Job: Tackling Insider Risk from All Angles
2024-10-31, 12:00–13:00 (Europe/Amsterdam), Main stage

Prepare for a dynamic and engaging presentation by two field specialists (Diana Makienko: Business Information Security Officer (BISO) at Swift and Lucile Renhas: Insider Risk Consultant at Signpost Six). This session will blend theoretical insights, academic studies, and real-life examples to provide a comprehensive understanding of insider risk. Attendees will uncover hidden risks within their organisation and learn how to effectively combat insider threats. This session will equip them with the knowledge and tools to enhance their organisation's resilience, ensuring a holistic approach to security.


In today's threat landscape, insider risk remains a critical yet often overlooked issue. While cybersecurity professionals have primarily focused on external threats, experience has shown that these measures are far from sufficient.
Our presentation will delve into the complexities of managing malicious insider threats, highlighting the unique challenges organisations face in detection and mitigation. We will discuss the rise of awareness in Europe, contrasting it with the US focus on technical tools and Europe's emphasis on employee protection and privacy. Key topics include:
• The portrait of a malicious insider: Understanding these characteristics, personal traits, and motives that drive people to commit insider crimes.
• Balanced Approach: Combining technical tools with employee protection, favouring in-house capacity building over-reliance on large American providers.
• Comprehensive Mitigation: Addressing Governance & Culture, IT & Physical Security, Employee and Third-Party Management, and Training & Communication, with an emphasis on the importance of employee awareness and training against social engineering.

I have been working in customer-facing roles in the multinational financial industry from the very beginning of my career. The Bangladesh hack ignited my interest for cybersecurity, leading me to enroll into executive cyber security masters at Leiden University. I graduated cum laude with a research paper on malicious insider threats. I'm particularly passionate about the human factor in cybersecurity and am a certified insider risk manager. Currently, I am the Business Information Security Officer (BISO) at Swift.

Beyond my professional endeavors, I am a proud mother of two young adults, a certified coach, a creative public speaker, and a skilled debate moderator. I speak six languages, enjoy traveling, sports, cooking and music, and have a keen interest in politics.

Lucile Renhas is an accomplished Insider Risk Consultant at Signpost Six, bringing a background in international relations to her role. She excels in managing and directing projects for multinational clients, collaborating closely with business leads and stakeholders to ensure successful outcomes. For the past two years, Lucile has been at the forefront of guiding a leading pharmaceutical company’s insider risk programme. Lucile holds a master's degree in Crisis and Security Management from Leiden University, specialising in the governance of radicalism, extremism, and terrorism.