Risk Assessment of Insider Threats Based on IHFACS-BN

Insider threats, as one of the pressing challenges that threaten an organization’s information assets, usually result in considerable losses to business. It is necessary explore key human factors enterprise security management should focus on preventing reduce probability insider threats effectively. This paper first puts forward improved Human Factors Analysis and Classification System (IHFACS) based actual management. Then, internal threat risk assessment model constructed using Bayesian network, expert evaluation, fuzzy set theory. Forty-three classic cases from China, United States, Israel during 2009–2021 are selected samples. reasoning sensitivity analysis recognizes top 10 most critical accident likely causal chain unsafe acts. The shows behavior was not assessing employees’ familiarity with company’s policies. In addition, improving organizational impact can effectively promote sustainable development enterprises.