Wellington Oscar
Senior Insider Threats Analyst, Bank of England
- AR4
- -IF022
- -IF022.001
Intellectual Property Theft - AR4
A subject misappropriates, discloses, or exploits proprietary information, trade secrets, creative works, or internally developed knowledge obtained through their role within the organization. This form of data loss typically involves the unauthorized transfer or use of intellectual assets—such as source code, engineering designs, research data, algorithms, product roadmaps, marketing strategies, or proprietary business processes—without the organization's consent. Intellectual property theft can occur during employment or around the time of offboarding, and may involve methods such as unauthorized file transfers, use of personal storage devices, cloud synchronization, or improper sharing with third parties. The consequences can include competitive disadvantage, breach of contractual obligations, and significant legal and reputational harm.
- AR3
- -PR020
- -PR020.002
Modification of Sensitivity Labels - AR3
The subject modifies or downgrades the sensitivity label of a file in an attempt to bypass DLP or other security controls.