Business Counter-Intelligence Protecting Your Most Precious Asset: Information Kroll Robert L. Grenier USA

Business Counter-Intelligence Protecting Your Most Precious Asset

Your Greatest Asset: Information “Classic” Intellectual Property Trademarks, copyrights, patents Trade Secrets Not public knowledge Provide economic advantage Strive to protect Others’ Information in Your Care

IP (cont.) All Considered IP 70-80% of U.S. companies’ value Motivated to protect Obliged under Sarbanes-Oxley 404

U.S., developed economies the main target The Threat Economic Espionage …from Competitors: U.S., developed economies the main target Estimated U.S. annual loss: $250-400 billion Greatly Under-reported …from Foreign Governments: FBI: 22% government-sponsored Governments see strategic interest Russia, China, Taiwan, S. Korea, others

Growing Vulnerability Companies More Vulnerable Than Ever Advancement of technology, computing, communications The human factor: Ignorance of vulnerabilities The “disposable employee” Key vulnerability: The “insider spy”

Defending Governments Overwhelmed Governments Recognize the Threat… e.g., Canada, UK, France, Germany, Sweden, Switzerland …But Can Do Little NCIX and FBI highlight the scope of threat Economic Espionage Act pursued Few prosecutions Simply overwhelmed Businesses Are On Their Own

What Companies Can Do: Business Counter-Intelligence Valuation: What is IP Worth? Prioritization: What Most Needs Protection? Assess the Threat: Who wants it? What are their methods? Assess Vulnerability Where and how we do business What are the gaps/points of failure How do we match against known espionage methods?

Business Counter-Intelligence (cont.) Remediation: Info Security: Electronic and paper-based Systems administration Network architecture Information architecture Physical Security Facilities Plans, policies & procedures Human security Personnel screening and monitoring Business culture and practices Awareness education and training