Cyber risk can arise from legitimate users as well as external attackers, particularly where individuals hold privileged access or organisations are undergoing workforce change. This course examines insider risk without assuming that every incident is deliberate or malicious. It considers how access, behaviour, organisational change and weak offboarding or role-change processes can combine to create avoidable exposure.

Participants examine privileged access, separation of duties, joiner-mover-leaver processes, unusual behaviour and the importance of proportionate escalation. The course also considers redundancies, disciplinary situations, contractors and other circumstances in which access risk may change quickly. Participants develop a more integrated understanding of how management, HR and cyber controls can work together while maintaining appropriate fairness and confidentiality.