{"id":60371,"date":"2025-09-26T11:03:49","date_gmt":"2025-09-26T11:03:49","guid":{"rendered":"https:\/\/becolve.com\/blog\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\/"},"modified":"2025-09-26T11:03:49","modified_gmt":"2025-09-26T11:03:49","slug":"the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments","status":"publish","type":"blog","link":"https:\/\/becolve.com\/en\/blog\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\/","title":{"rendered":"The Threat of the \u201cMalicious Insider\u201d in Industrial Operation and Critical Infrastructure Environments"},"content":{"rendered":"

It is difficult to translate the term \u201cmalicious insider\u201d<\/strong> into Spanish, but with some imagination and put in context, it can be concluded that this type of threat refers to the existence of people in an organization<\/strong> (either internal-employees or external-suppliers, engineering, integrators, contractors) who, through carelessness, ignorance, and\/or bad faith, perform an \u201caction\u201d that affects the security of the processes<\/strong>, systems, or facilities of an industrial operation environment or critical infrastructure.<\/span><\/p>\n

Among these \u201cactions,\u201d we could list the following<\/strong>: carrying out bad practices by having access to critical systems with administrator privileges; using USB devices not authorized by the organization that contain malware; carrying out malicious actions by possessing detailed knowledge of diagrams and configurations of the industrial network; carrying out actions provoked by social engineering; ignoring the policies, procedures, standards, and best practices designed, and so on.<\/span><\/p>\n

This type of threat has been analyzed by institutions such as the US-CERT.<\/strong> In fact, in May 2014, a whitepaper was published with the title: \u201cCombating the Insider Threat\u201d<\/strong>. From this publication, we would highlight the description of the profile of an \u201cInsider Threat\u201d<\/strong> that we extrapolate below. <\/span><\/p>\n

\"insiders<\/p>\n

The question that arises naturally is: What can be done to combat this type of threat?<\/strong><\/span><\/p>\n

From our point of view, the following three areas should be worked on:<\/span><\/p>\n

    \n
  1. The design and, very importantly, the correct communication<\/b> of policies and procedures<\/span><\/a>.<\/span><\/li>\n
  2. The realization of awareness and training days in the field of industrial cybersecurity.<\/span><\/a><\/span><\/li>\n
  3. The implementation of initiatives that unite efforts and understanding between those responsible for IT security and OT security.<\/span><\/a><\/span><\/li>\n<\/ol>\n

    It is not an easy task; people are the weakest link in the chain that secures an organization’s OT environment,<\/strong> but some specific action must be taken if we want to mitigate and\/or eliminate this important threat.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

    What is a malicious insider? and… What can be done to combat this type of threat? We list the most common actions and how to avoid them…<\/p>\n","protected":false},"author":31,"featured_media":60373,"menu_order":0,"template":"","categories":[1371],"tags":[],"arquitectura":[1839],"area":[],"sector":[],"experto":[1396],"weborigen":[157],"productos-tax":[],"soluciones-tax":[],"marcas-tax":[],"coauthors":[],"class_list":["post-60371","blog","type-blog","status-publish","has-post-thumbnail","hentry","category-cybersecurity","arquitectura-industrial-cybersecurity","experto-industrial-cybersecurity-total-availability","weborigen-ciberseguridadlogitek-com"],"acf":[],"yoast_head":"\nThe threat of the \u201cmalicious insider\u201d in critical infrastructures<\/title>\n<meta name=\"description\" content=\"Personas que, por negligencia o mala fe, afectan la seguridad de los procesos.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/becolve.com\/en\/blog\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The threat of the \u201cmalicious insider\u201d in critical infrastructures\" \/>\n<meta property=\"og:description\" content=\"Personas que, por negligencia o mala fe, afectan la seguridad de los procesos.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/becolve.com\/en\/blog\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\/\" \/>\n<meta property=\"og:site_name\" content=\"Becolve Digital\" \/>\n<meta property=\"og:image\" content=\"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/malicious-insider.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"620\" \/>\n\t<meta property=\"og:image:height\" content=\"250\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@Logitek_es\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"Becolve Digital\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\\\/\",\"url\":\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\\\/\",\"name\":\"The threat of the \u201cmalicious insider\u201d in critical infrastructures\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/malicious-insider.jpg\",\"datePublished\":\"2025-09-26T11:03:49+00:00\",\"description\":\"Personas que, por negligencia o mala fe, afectan la seguridad de los procesos.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\\\/#primaryimage\",\"url\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/malicious-insider.jpg\",\"contentUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/malicious-insider.jpg\",\"width\":620,\"height\":250},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/becolve.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog Items\",\"item\":\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"The Threat of the \u201cMalicious Insider\u201d in Industrial Operation and Critical Infrastructure Environments\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/becolve.com\\\/en\\\/\",\"name\":\"Becolve Digital\",\"description\":\"Transformaci\u00f3n digital en industria e infraestructuras\",\"publisher\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/becolve.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/#organization\",\"name\":\"Becolve Digital\",\"url\":\"https:\\\/\\\/becolve.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/becolve-logo-h-black_200.png\",\"contentUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/becolve-logo-h-black_200.png\",\"width\":200,\"height\":64,\"caption\":\"Becolve Digital\"},\"image\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Logitek_es\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/becolve-digital\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The threat of the \u201cmalicious insider\u201d in critical infrastructures","description":"Personas que, por negligencia o mala fe, afectan la seguridad de los procesos.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/becolve.com\/en\/blog\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\/","og_locale":"en_US","og_type":"article","og_title":"The threat of the \u201cmalicious insider\u201d in critical infrastructures","og_description":"Personas que, por negligencia o mala fe, afectan la seguridad de los procesos.","og_url":"https:\/\/becolve.com\/en\/blog\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\/","og_site_name":"Becolve Digital","og_image":[{"width":620,"height":250,"url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/malicious-insider.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@Logitek_es","twitter_misc":{"Est. reading time":"1 minute","Written by":"Becolve Digital"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/becolve.com\/en\/blog\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\/","url":"https:\/\/becolve.com\/en\/blog\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\/","name":"The threat of the \u201cmalicious insider\u201d in critical infrastructures","isPartOf":{"@id":"https:\/\/becolve.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/becolve.com\/en\/blog\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\/#primaryimage"},"image":{"@id":"https:\/\/becolve.com\/en\/blog\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\/#primaryimage"},"thumbnailUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/malicious-insider.jpg","datePublished":"2025-09-26T11:03:49+00:00","description":"Personas que, por negligencia o mala fe, afectan la seguridad de los procesos.","breadcrumb":{"@id":"https:\/\/becolve.com\/en\/blog\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/becolve.com\/en\/blog\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/becolve.com\/en\/blog\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\/#primaryimage","url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/malicious-insider.jpg","contentUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/malicious-insider.jpg","width":620,"height":250},{"@type":"BreadcrumbList","@id":"https:\/\/becolve.com\/en\/blog\/the-threat-of-the-malicious-insider-in-industrial-operation-and-critical-infrastructure-environments\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/becolve.com\/en\/"},{"@type":"ListItem","position":2,"name":"Blog Items","item":"https:\/\/becolve.com\/en\/blog\/"},{"@type":"ListItem","position":3,"name":"The Threat of the \u201cMalicious Insider\u201d in Industrial Operation and Critical Infrastructure Environments"}]},{"@type":"WebSite","@id":"https:\/\/becolve.com\/en\/#website","url":"https:\/\/becolve.com\/en\/","name":"Becolve Digital","description":"Transformaci\u00f3n digital en industria e infraestructuras","publisher":{"@id":"https:\/\/becolve.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/becolve.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/becolve.com\/en\/#organization","name":"Becolve Digital","url":"https:\/\/becolve.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/becolve.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/becolve-logo-h-black_200.png","contentUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/becolve-logo-h-black_200.png","width":200,"height":64,"caption":"Becolve Digital"},"image":{"@id":"https:\/\/becolve.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Logitek_es","https:\/\/www.linkedin.com\/company\/becolve-digital\/"]}]}},"_links":{"self":[{"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/blog\/60371","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/users\/31"}],"version-history":[{"count":0,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/blog\/60371\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/media\/60373"}],"wp:attachment":[{"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/media?parent=60371"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/categories?post=60371"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/tags?post=60371"},{"taxonomy":"arquitectura","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/arquitectura?post=60371"},{"taxonomy":"area","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/area?post=60371"},{"taxonomy":"sector","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/sector?post=60371"},{"taxonomy":"experto","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/experto?post=60371"},{"taxonomy":"weborigen","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/weborigen?post=60371"},{"taxonomy":"productos-tax","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/productos-tax?post=60371"},{"taxonomy":"soluciones-tax","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/soluciones-tax?post=60371"},{"taxonomy":"marcas-tax","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/marcas-tax?post=60371"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/coauthors?post=60371"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}