Revealing the multi-perspective factors behind insider threats in cybersecurity

In the realm of cybersecurity, insider threats persist as significant challenges for organisations globally. Despite increasing acknowledgement of their impact, there is a lack of comprehensive studies that explore the multi-perspective factors contributing to insider threat occurrence from a holistic standpoint. This study aims to address this gap by conducting a thorough analysis of the human, technical, and organisational elements influencing insider threats. Through a content analysis approach, this study delves into the intricate interplay of individual characteristics, technical vulnerabilities, and organisational practices that can give rise to insider threats. This methodology involves systematically collecting, coding, and analysing a diverse range of textual data sources to identify recurring themes and patterns related to insider threats. We employed the Preferred Reporting Items for Systematic Review and Meta-Analysis (PRISMA) method to systematically review the literature. We conducted a literature search on Scopus, Web of Science, and IEEE for articles published between 2014 and 2023. We discovered a total of thirty-two (32) articles that were relevant for further analysis. The data indicates that human factors consist of five themes and fifteen sub-themes, technical factors have one theme and four sub-themes, and organisational factors have four themes and fifteen sub-themes. Overall, this study emphasises the importance of approaching insider threats from multiple perspectives, since no single factor operates independently. Instead, it is the combination and interaction of human, technical, and organisational components that create vulnerabilities and opportunities for insider threats.