How to digitize human factor
Prevention is the key process of incident management – it is better to discover reasons and sources of a possible security breach than to fight consequences. Potential insiders are not easy to detect, and general data safety approach including basic instruments are not sufficient to reveal a violator. Even a DLP system is not that powerful. And that’s why:
- Many data protection tools are inappropriate when it comes to human craftiness
- Incidents and crimes are often untraceable
- Information accessibility increases the awareness and agility among IT competent employees
- A defense requires much more efforts than an attack. It is difficult to foreknow a violator’s behavior, to be prepared to the plot
Although it doesn’t make specialists less responsible for human factor management. They should:
- Create an effective mechanism capable of providing you with an employee’s behavior evaluation and accurate forecast
- Find a simple, quick and efficient investigation method
- Identify correctly and range the level of the human risk
It is important to remember that time is the key parameter of a human factor incident investigation.
An automated profiling is among the instruments which allow to solve human-related problems and prevent incidents. The system includes tools for psychodiagnostics which help to “scan” a person quickly and reliably, understand one’s peculiarities and communicate efficiently, forecast behavior.
Profiling toolset:
- Psycholinguistics analysis
- Individuality type identification
- Communication strategy and tactics
- Facial expressions and gestures recognition
- Thinking and behavioral strategy detection
Profiling: how to use?
Profiling is based on psychology and criminalistics. The elements of this technology are used during an investigation and as a means to fight terrorism.
A mining company had experienced a financial loss. The source of the crime couldn’t be tracked down, and about 20 people became suspects. A profiler applied group profiling methods and techniques and narrowed the number of possible violators down to 2 persons. The next day an offender confessed and brought back the stolen money.
Try the automated technology and make sure you know your team
Profiling allows you to:
- obtain details about employees, their values, professional qualities and communicative skills
- identify criminal propensities considering different types of security crimes and incidents
- benefit from additional instruments for investigation
- detect human risks
- forecast staff behavior in standard, critical and stressful situations
- approach HR tasks efficiently and conforming to security requirements
Despite obvious rationality, conducting such a performance “manually” is a time consuming job. Profiling 30-40 employees regularly can take a lot of time.
DLP and profiling – technological symbiosis
An automated forecast and integration of profiling instruments into a DLP functionality – such an ambitious goal was set by SearchInform.
Besides labor cost reduction, automated profiling lets you be cautious when dealing with an insider, avoid negativity escalation within a team, conduct an investigation and preliminary diagnosis not drawing too much attention of the staff.
SearchInform conducts investigations, develops automated methods for behavioral prognosis. ProfileCenter is a module integrated into the SearchInform DLP. The implementation of the concept is based on a person’s psychological peculiarities which influence the way an employee behaves at the workplace. ProfileCenter module analyzes a user’s actions and character traits as well as deviations. The system shapes a psychological profile of an employee according to certain algorithms, i.e. assume routine tasks making the work of specialists responsible for monitoring more prompt and productive.
