Insider fraud and routine activity theory

This paper examines three scenarios of insider fraud based on empirical data from an upper-tier budget hotel in London, as part of a thought experiment on insider fraud. The scenarios are presented in the form of crime scripts and are reviewed under the theoretical framework of the Routine Activity Approach, which is widely used in crime science. The discussion that follows reflects on the theoretical underpinnings of the Routine Activity Approach and raises wider issues and concerns relating to information security, such as the adoption and implementation of controls against the insider threat.