1. Business Counter-Intelligence
Protecting Your Most Precious Asset: Information
Kroll
Robert L. Grenier
USA

2. Business Counter-Intelligence
Protecting Your Most
Precious Asset

3. Your Greatest Asset: Information
“Classic” Intellectual Property
Trademarks, copyrights, patents
Trade Secrets
Not public knowledge
Provide economic advantage
Strive to protect
Others’ Information in Your Care

4. IP (cont.) All Considered IP 70-80% of U.S. companies’ value
Motivated to protect
Obliged under Sarbanes-Oxley 404

5. U.S., developed economies the main target
The Threat
Economic Espionage
…from Competitors:
U.S., developed economies the main target
Estimated U.S. annual loss: $ billion
Greatly Under-reported
…from Foreign Governments:
FBI: 22% government-sponsored
Governments see strategic interest
Russia, China, Taiwan, S. Korea, others

6. Growing Vulnerability
Companies More Vulnerable Than Ever
Advancement of technology, computing, communications
The human factor:
Ignorance of vulnerabilities
The “disposable employee”
Key vulnerability: The “insider spy”

7. Defending Governments Overwhelmed
Governments Recognize the Threat…
e.g., Canada, UK, France, Germany, Sweden, Switzerland
…But Can Do Little
NCIX and FBI highlight the scope of threat
Economic Espionage Act pursued
Few prosecutions
Simply overwhelmed
Businesses Are On Their Own

8. What Companies Can Do: Business Counter-Intelligence
Valuation: What is IP Worth?
Prioritization: What Most Needs Protection?
Assess the Threat:
Who wants it?
What are their methods?
Assess Vulnerability
Where and how we do business
What are the gaps/points of failure
How do we match against known espionage methods?

9. Business Counter-Intelligence (cont.)
Remediation:
Info Security: Electronic and paper-based
Systems administration
Network architecture
Information architecture
Physical Security
Facilities
Plans, policies & procedures
Human security
Personnel screening and monitoring
Business culture and practices
Awareness education and training