Insider Risk Awareness Course
Safeguard your organisation from one of the most common and costly security challenges: insider activity. The Insider Risk Awareness Course offers essential and accessible training for all employees. It helps them understand how unintentional actions, stressors, and behavioural changes can lead to risks that affect safety, operations, data, and organisational integrity. Because the course is fully online and easy to follow, it is suitable for colleagues across all sectors and seniority levels.
Course Description
Insider activity is a growing concern for organisations in every sector. Although some incidents are intentional, most occur by accident. When individuals with legitimate access make mistakes or behave differently under stress, the impact can be significant. As a result, organisations need staff who can spot these issues early. This introductory online course provides clear and practical guidance to help employees recognise Insider Risk, understand contributing factors, and identify early warning signs.
Throughout the course, learners work through scenario-based activities and real examples. These help them understand the difference between Insider Risk and Insider Threat. They also explore how personal stressors, workplace pressures, and organisational responses can influence behaviour. In addition, learners discover how and when to report concerns.
To ensure universal accessibility, the course uses simplified language and practical explanations. It is relevant to all employees. However, those working in higher-risk functions such as HR, Finance, IT, and line management should be prioritised. They may also benefit from progressing to the intermediate course. By raising awareness across the workforce, organisations can strengthen their security culture, support colleagues more effectively, and reduce the likelihood of insider-related incidents.
Importance of Training
Insider activity is rarely malicious. In fact, more than 75 per cent of cases happen because of mistakes, stress, or a lack of understanding. Nevertheless, the consequences can be severe. Data breaches, loss of intellectual property, financial harm, operational disruption, and reputational damage are all possible outcomes. Moreover, global reporting shows that insider incidents now take organisations an average of 81 days to contain, with negligent events costing millions.
Because of this, employees must understand how to recognise concerning behaviours, respond appropriately, and act early. This course helps staff play an active role in safeguarding the workplace and knowing when to report an issue. As a result, organisations are better protected and more resilient.
Subject Matter Expert Bio
Paul Hewitt MSyl
Paul Hewitt is a Security Advisor specialising in Physical and Personnel Security and the Founder of Insider Risk Solutions. With more than two decades of experience supporting government, academic, and private sector organisations worldwide, Paul brings extensive knowledge in protective security, insider risk mitigation, and operational resilience.
He also serves as the Co-Chair of the Security Institute’s Insider Risk Special Interest Group. In this role, he has helped design and implement Personnel Security Strategies, Insider Risk Frameworks, and protective security programmes aligned with the UK Government’s Industry Personnel Security Assurance (IPSA) standards.
In addition, Paul has deep experience in operational risk management and stakeholder engagement. He focuses on building resilient organisational cultures where security awareness and personal accountability are part of everyday behaviour. His expertise includes vetting governance, insider threat mitigation, and the design of tailored security training for diverse workforces.
As both a practitioner and an educator, Paul is committed to demystifying security concepts and empowering colleagues to recognise, prevent, and report insider risks. His work helps organisations protect themselves from the inside out.
Course Objectives
By the end of this course, learners will be able to:
-
Understand the difference between Insider Risk and Insider Threat
-
Recognise the harm that Insider Activity can cause if left unaddressed
-
Identify Pre-Incident Indicators (PINs) linked to Insider Activity
-
Define stressors and understand the Insider Critical Pathway
-
Demonstrate the actions required to reduce, mitigate, or report Insider Activity
Course Format
This short online course takes around 20 minutes to complete. Learners can progress at their own pace, which makes the training flexible and convenient. The course includes a mix of video content, scenario-based activities, interactive decision-making, drag-and-drop tasks, and practical examples. After purchase, learners gain immediate access through the Study Academy platform. Organisations with their own LMS can request a SCORM package for easy integration.
Accreditation and Endorsement
This course is endorsed by Birmingham City University. The endorsement confirms that the training meets high professional standards and provides recognised development value for learners across all sectors.
Recommended External Resources
To support your continued learning and strengthen your approach to insider risk, the following resources offer further guidance, case studies, and best-practice frameworks from trusted organisations:
-
Plan for Insider Risk Management – Microsoft
https://learn.microsoft.com/en-us/purview/insider-risk-management-plan -
A Pragmatic and Threat-Based Approach to Address Cyber Insider Risk – PwC
https://www.pwc.co.uk/cyber-security/pdf/pragmatic-and-threat-based-approach-to-address-cyber-insider-risk.pdf -
A Comprehensive Guide to Insider Risk Management – Teramind
https://www.teramind.co/blog/insider-risk-management/ -
Best Practices for Insider Threats – SIFMA
https://www.sifma.org/resources/general/best-practices-for-insider-threats/ -
Insider Risk Guidance – National Protective Security Authority (UK)
https://www.npsa.gov.uk/specialised-guidance/insider-risk-guidance -
Insider Threat Examples: 3 Famous Cases and 4 Preventive Measures – Exabeam
https://www.exabeam.com/explainers/insider-threats/insider-threat-examples/ -
Insider Risk vs. Insider Threat: What’s the Difference? – DTEX Systems
https://www.dtexsystems.com/blog/insider-risk-vs-insider-threat-what-makes-one-and-not-the-other/
