SOFIT (Sociotechnical and Organizational Factors for Insider Threat) – An ontology for insider risk and threat determination. By Tom Roberts, Pen Test Partners.

Watch more interviews and presentations from CRESTCon here:
   • CRESTCon UK 2022  

SOFIT recognises that people are a vital part of business systems and that their failure can have wider impacts. Businesses should seek to formulate processes and procedures to monitor, assist, support and eventually protect themselves from intentional or accidental insider threat. SOFIT helps to create those frameworks and adapt tools you may already have in place to assist in reducing or preventing insider risk. www.pentestpartners.com/content/uploads/2021/08/An…

Tom Roberts is a senior consultant at Pen Test Partners. He has a variety of skills from Social Engineering, IT security consultancy, to Maritime Compliance. He has developed a wide variety of skills over the 30+ years he has worked in infosec. Tom is not a fan of the limelight, but involves himself in the wider infosec community and helps organise grassroots infosec conventions (Bsides Cymru – www.bsides.cymru/about.html)

Find out more about CREST:
www.crest-approved.org/

Follow CREST on social media:
twitter.com/crestadvocate
www.linkedin.com/company/crest-approved