Kevin Faulkner, Joseph Santiesteban

Insider threats can have a significant impact because they involve actors who know where to locate and leverage sensitive data and how to cover their tracks in the process, even long after they’ve left the organization. In fact, the 2022 Unit 42 Incident Response Threat Report noted that 75% of insider threat cases were caused by disgruntled ex-employees who left with or destroyed company data or accessed company networks after their departure. This session will include tales of corporate espionage, how we track criminal activity through forensic investigations, the potential impact of an economic downturn on cybercriminal activity by insiders, how the usual suspect threat actors can leverage former employees and their credentials to conduct illicit activities, and steps to take now to reduce the risk of this evolving threat.

Kevin Faulkner, Vice President, Unit 42 by Palo Alto Networks
Joseph Santiesteban, Partner, Orrick, Herrington & Sutcliffe


Joseph Santiesteban

Orrick, Herrington & Sutcliffe

Kevin Faulkner

Vice President
Unit 42 by Palo Alto Networks