Identity Threat Assessment and Prediction (ITAP) is a risk assessment tool that increases fundamental understanding of identity theft processes and patterns of criminal behavior. ITAP aggregates data on identity theft to analyze and describe identity vulnerabilities, the value of identity attributes, and their risk of exposure.
The ITAP research program provides insight into the habits and methods of identity thieves. The ITAP model discovers the identity attributes most vulnerable to theft, assesses their importance, and determines the personally identifying information (PII) most frequently targeted by thieves. In doing so, ITAP intends to offer behavioral and cognitive recommendations to thwart future identity theft crimes.
The analytical repository of ITAP offers identity solutions relevant to people, organizations, and devices across multiple domains, including financial services, consumer services, healthcare, education, defense, energy, and government. ITAP seeks to provide an unprecedented level of awareness throughout the identity threat environment. Our goal is to use ITAP to deliver actionable knowledge grounded in analyses of past threats and countermeasures, current threats and solutions, and evidence-driven forecasts.
2018 ITAP Report
The 2018 ITAP report provides a summary of the latest statistics and findings from the ITAP project. Key takeaways from the 2018 report include the following:
- Ten market sectors are such that over 60% of their incidents involve two or more types of loss.
- Over 50% of incidents involving high emotional distress are perpetrated by insiders (e.g. employees, family members).
- Emotional distress is by far the most common type of loss, applying to 75% of all incidents. (Financial loss is the next most common, at 54%.)
- Half of all market sectors -- nine of them -- are such that over 45% of their incidents involve high levels of emotional distress.
- Incidents involving both digital and non-digital methods have a higher average emotional impact than those involving pure digital or purely non-digital means.
- Incidents perpetrated by both insiders and outsiders have a higher average emotional impact than those performed by insiders or outsiders alone.
- Less than 1% of all incidents involve the compromise of “What You Do” PII (e.g. buying habits, travel patterns).