Global Impact
Building capability and shaping standards in insider risk worldwide
Governance Driven
Strengthening oversight, accountability and risk-aware culture
Human Centred
Understanding the behaviours and decisions that drive risk
Leadership Focus
Positioning insider risk as a strategic leadership priority
409
Incidents Analysed
25
Countries Represented
15
Industry Sectors
10
Strategic Threat Categories
2026 Global Insider Threat Barometer
124
Expert Responses Collected
Insights drawn from senior practitioners across sectors.
15
Insider Threat Scenarios Identified
Credible scenarios organisations are likely to face in 2026.
5
Core Themes Shaping 2026
The dominant patterns driving insider risk in an AI-accelerated environment
2026 Insider Threat Prediction Report
Insider threats are evolving faster than most organisations can adapt.
AI-enabled insiders, silent data leakage, trusted access abuse.
2026 will redefine what “inside” really means.
The 2026 Insider Threat Predictions offer a forward-looking assessment of the insider risk landscape.
Drawing on behavioural, technological, and organisational factors, this report outlines the threats and conditions likely to define the year ahead.
Weekly Intelligence Briefing
Stay ahead of insider threats with our Weekly Intelligence Briefing, a sharp, insight-led analysis of the most important stories shaping the week.
Each edition cuts through the noise to uncover a central theme, highlights three key signals, and explains what it means for organisations across Australasia and APAC. We break down the capability gap, pose one critical question for leaders, and turn emerging risks into practical thinking tools.
Designed to build capability over time, this is your go-to resource for ongoing learning, teaching, and staying one step ahead, with a growing library you can search by topic whenever you need it.
Board Members & Executive Leaders
Executive Boardroom Briefing
Many Boards assume insider risk is effectively managed. But could your Board confidently explain where the organisation is most exposed?
This confidential briefing offers an independent perspective on insider risk, leadership blind spots, and the questions your Board should ask.
Risk, Security & Governance Leaders
Insider Risk Snapshot
Security controls may be in place, but do you know where trust, access, governance and human behaviour are creating unseen exposure?
The Insider Risk Snapshot provides an independent view of your current exposure, potential blind spots, and where attention may be needed.
How Prepared Is Your Organisation?
Insider Threat Capability Assessment
Having security controls does not mean you are prepared. Could your organisation effectively prevent, detect, deter, and respond to an insider threat?
Our Capability Assessment identifies where you are strong, where gaps exist and what needs improvement.
Concerned About an Insider Incident?
Insider Incident Advisory
When something happens, acting too quickly can compromise evidence. Waiting too long can allow further harm to occur.
AIIT provides independent advice to help you understand what happened, protect the organisation, and determine the appropriate next steps.
How Can We Help You?
Every organisation faces different challenges. Choose the option that best reflects your current situation and discover how AIIT can help.
Not Sure Where to Start?
Let's Start with a Conversation
Not every organisation fits neatly into a predefined service. If you're exploring insider risk, have questions about your current approach, or simply want an independent perspective, we're here to help.
We will discuss your organisation, understand your objectives, and help determine the most appropriate next step.
Beyond Risk Appetite
Most organisations have risk frameworks, dashboards, and appetite statements in place. Yet significant failures continue to occur. The problem is rarely a lack of effort. It is where that effort is directed.
This article explores why measuring risk is not the same as understanding it, and why leaders need to examine the conditions that make harm possible before deciding how much risk they are willing to accept.
Insider Threats Vs Insider Risk
This executive paper examines the growing confusion between insider threat and insider risk, and why the distinction matters.
It explores how organisations have increasingly adopted “insider risk” language while continuing to focus primarily on detection, monitoring, and technology-led solutions.
The paper introduces a structured model for understanding insider risk as a dynamic interaction between threat, vulnerability, access, behaviour, and organisational conditions.
When AI Makes Financial Crime Possible Without Intent
Most organisations assume financial crime requires a bad actor. But what happens when the employee is trusted, the system is approved, and the workflow looks entirely normal?
This report examines how AI is quietly reshaping financial crime risk, enabling serious harm through ordinary operational activity, without intent, without suspicion, and often without detection.
A question every leader should ask: Is your organisation governing AI-enabled risk, or simply assuming your existing frameworks are enough?
The Triggered Workplace
A Rising Organisational Risk That Conventional Frameworks Were Not Designed to See.
Psychological injury claims in Australian workplaces have risen 97.3% over the past decade. They last longer, cost more, and resist conventional return-to-work pathways. And at the centre of the pattern is a single word that has quietly changed everything.
A question every leader should ask: Is your organisation responding to genuine distress, or inadvertently creating the conditions that make it harder to resolve?
Insider Risk
Governance Blind Spot
Why Traditional Governance Fails To Address Insider Risks
Let’s be honest, most governance models weren’t built for human risk.
They are built for checklists, not people.
Insider threats don’t wave red flags in compliance reports.
They hide behind long service, good reputations, and “we trust our people.”
Why Insider Threat Maturity is Hard to Judged
How Organisations Confuse Activity, Structure, and Silence for Real Readiness.
Most organisations believe they are mature in insider threat.
Policies? Tick… Training? Tick… Tools? Tick.
So why do insider incidents still shock leadership teams?
Because insider threat maturity isn’t a checkbox. It’s a capability. And many programs look solid on paper, but fracture under real pressure.
Risk Management is Dead,
Long Live Risk Resiliency
Why Traditional Risk Management No Longer Protects Against Insider Threats.
Traditional risk management wasn’t built for people.
It was built for processes.
Insider threats don’t follow policy manuals or wait for audit cycles.
They operate in the shadows of culture, trust, and human behaviour — areas that most frameworks fail to see.
Explore Our Insider Threat Insights
Our downloadable articles and reports provide executive-level analysis of insider threat maturity, governance gaps,
and risk resilience. Grounded in behavioural insight and real-world patterns, they challenge conventional
assumptions and highlight where organisations are most vulnerable.
Access the reports to strengthen your oversight, decision-making, and insider threat capability.
Insider Threat Capability Assessment
How confident are you in your organisation’s ability to prevent, detect, deter, and respond to insider threats?
Most organisations have controls. Far fewer have true capability.
AIIT’s Insider Threat Capability Assessment provides an independent, organisation-wide view of how ready your business truly is across governance, people, culture, access, detection, and response.
You’ll gain clarity on:
Where your organisation is genuinely exposed
Where capability gaps exist and
What matters most to strengthen first.
Download the assessment overview to learn how this works, what you receive, and whether it’s right for your organisation.
Explore Our Books
Insider Risk Perspective Insights
Insider Risk Perspectives is a collection of short, focused insights exploring how insider risk actually behaves within organisations.
These perspectives examine the intersection of people, access, behaviour, leadership, and organisational dynamics and how these factors come together to create, amplify, or expose risk.
Each piece is designed to challenge common assumptions and highlight the gap between what organisations believe is happening and what is actually happening.
Advance Your Insider Threats Skills & Capabilities
Because insider threats don't wait, and neither should your capability.
AIIT membership connects you to the intelligence, training, and professional network you need to stay ahead of the insider threat landscape. From exclusive reports and courses to peer access and early event registration, your membership is a direct investment in organisational resilience.
Exclusive Video Interviews
Get insights from experts discussing real insider threat challenges and resilience strategies.
Leadership Reflection Exercise
Download tools and templates to help leaders assess and strengthen insider risk governance.
Conversation Cards and Primers
Support organisation-wide discussions on human risk, resilience, and security culture.