DIG_SEC_008

Insider Threat

Interdisciplinary risk where labor-force instability and 'Resenteeism' (CS05) motivate unauthorized exfiltration of core R&D/IP (ER07). In 2026, this is facilitated by 'Permission Creep' (DT04), where users retain legacy access rights across long tenures, allowing for 'Living off the Land' data theft that bypasses traditional perimeter defenses.

Cybersecurity & Fraud 3 Conditions

Business Impact

Moat Destruction. Theft of core source code, trade secrets, or AI weights allows competitors (domestic or hostile state-owned) to replicate products with zero R&D cost. Results in permanent loss of market leadership, 40-60% intangible asset write-downs, and immediate loss of 'Trusted Vendor' status.

Trigger Conditions

All conditions must be met to trigger this risk

ER07 Structural Knowledge Asymmetry
≥ 5 / 5
CS05 Labor Integrity & Modern Slavery Risk
≥ 3 / 5

Opaque Sub-contracting: High reliance on temporary or migrant labor; complex sub-tier layers where direct visibility is low; history of labor friction.

DT04 Regulatory Arbitrariness & Black-Box Governance
≤ 2 / 5

Standard Bureaucracy: Rules are clear but enforcement can be slow or inconsistent; standard level of administrative 'Noise'.

Mitigation Strategy

Deploy 'User and Entity Behavior Analytics' (UEBA) to baseline 'normal' file egress; enforce 'Just-in-Time' (JIT) and 'Just-Enough' Access (JEA) for R&D repos; implement 'Termination-Triggered Lockouts' tied to HR offboarding systems.

Risk Cascade

Rules can trigger other rules in a cascade effect:

Example Scenario

Software Development / Biotech (ISIC 6201)

In 2026, a senior developer (CS05) facing personal financial stress leverages legacy admin rights (DT04) to download the firm's entire proprietary AI model weights. The theft is only discovered 3 months later when a clone appears on a dark-web marketplace.

Matched Industries

1 industriy meets all conditions of this rule:

ISIC 6820 Real estate activities on a fee or contract basis View scenario →