Topic starter
25/10/2026 11:06 am
TL;DR: Insider risk has shifted from a niche cyber issue to a business, AI governance, and operational trust problem, according to DTEX at Insider West 2026, with leaders focusing on behavior, proportional controls, and cross-functional accountability. The governance model now matters as much as detection because static rules cannot keep pace with how people and machines move data.
Editorial analysis by NHI Mgmt Group, based on content published by DTEX: “Insider West 2026: What This Year’s Conversations Reveal About the Future of Insider Risk”.
Key questions
Q: How should organisations account for AI usage in insider risk governance?
A: Treat approved AI tools as data movement destinations and include them in monitoring, policy enforcement, and incident modelling.
Q: What is the biggest failure mode in insider risk programmes?
A: The biggest failure mode is assuming that static rules can explain intent.
Q: What are the signs that an insider risk programme is too security-centric?
A: Common signs include rising alert counts, more shadow tooling, repeated workarounds, and low confidence from HR, legal, or privacy stakeholders.
Practitioner guidance
- Define insider risk as a business governance domain Map insider risk ownership across security, HR, legal, privacy, and executive leadership so that accountability is explicit before a case appears.
- Shift controls from binary policy to behavioural context Use behavioural sequence, timing, role, and deviation signals to decide when a normal action becomes a meaningful risk event.
- Build AI-aware data handling oversight Review where AI tools accelerate data movement or summarisation and define what kinds of content, destinations, and workflows require extra scrutiny.
Bottom line: Insider risk is increasingly managed as a business and governance problem, not only as a security detection problem.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →