Industrial Automatic Control Systems and Controllers Annotation << Back Identification of an Internal Attacker in the Enterprise Based on Monitoring the Facts of Competition Between Employees E.A. Vitenburg, A.Sh. Shikhverdieva For successful business development, it is necessary to properly manage risks, including those related to information security. When assessing risks, the actions of attackers should be taken into account, among which internal and external are distinguished. Often, the actions of internal attackers, insiders, have the most detrimental effect on the company (organization). The main danger lies in the high awareness of internal attackers about vulnerabilities in the information systems (hereinafter – IS) of the company (organization). The studies in this paper are based on the analytical data of the leading manufacturer of information security tools InfoWatch. InfoWatch has defined a classification of insiders, but this classification of insiders does not take into account such a type of intruder as a «competing insider». This article discusses the signs of a «competing insider» and the impact of competition on the level of information security of an organization. To identify and combat malicious influences with different types of insiders, a method based on evaluating the effectiveness of the organization’s personnel is proposed. Existing software methods for detecting internal intruders can prevent the leak of confidential information, and the proposed method allows you to identify insiders in the early stages of preparing malicious activities. Keywords: insider; competition; level of information security; attacker; performance assessment. DOI: 10.25791/asu.6.2020.1195 Pp. 58-63.