On the use of polygraph in the interests of identifying insider threats to information security

Abstract

The use of the polygraph for detecting potential threats to information security while hiring new job candidates or examining the staff is justified. Based on the Russian Federation Constitution and the Labour Codex we justify the legality of the use of the polygraph in Russian Federation. Based on the theoretical approach describing the freeze-flight-fight reaction, as well as the Ivanitsky’s theory of informational synthesis we justified the scientific value of psychophysiological methods of detecting lies. In order to justify a reliability of the obtained information we make use of statistical studies by American scientists. A list of information needed to identify insider threats and incident investigation is given in this paper, and it is proposed to use the polygraph in order to obtain this information directly from those who obtain it.

Keywords

• insider threat to information security
• polygraph
• polygraph verification
• validity of verification
• scientific character of method
• reliability of information