Advice on Concerns and Insider Incidents
Support when the situation is unclear
A concern can arise from a report, unusual activity, changed behaviour, an access incident or a suspicion that information or assets are exposed. In the first phase the information is often incomplete, while incorrect handling can harm people, evidence, operations and trust alike.
We provide confidential advice and decision support to management and the relevant specialist functions. The aim is to establish as precise a situational picture as possible, secure the necessary assets and look after everyone involved in a responsible manner.
We can assist with
- initial assessment and structuring of the concern
- mapping of affected assets, access rights, vulnerabilities and possible consequences
- advice on immediate, proportionate risk-reducing measures
- establishing cross-functional handling between management, HR, IT, security and the legal function
- a plan for information gathering, documentation and quality assurance
- support for conversations, reporting, communication and internal coordination
- assessment of the need for the police, authorities or other specialist expertise
- evaluation and learning once the incident has been closed
A balanced and responsible process
A concern is not the same as a person having done something wrong. The handling must therefore be based on facts, clear authority, confidentiality and respect for privacy and the framework of employment law. We help the organisation distinguish observations from assumptions and choose measures that are proportionate to the actual risk.
Where needed, our assistance can be combined with technical investigations, threat assessments, emergency preparedness support or other relevant services. The assignment is tailored to the severity of the situation and the organisation's existing emergency preparedness.
← Back to Security Culture and Insider Risk