When external forces attack, company cyber security experts handle the response. Insider attacks require an extended incident response team, typically including Legal, HR, business line management, and at times, the courts. Swift decision-making and sure response requires clear communication of exactly what is happening and who is involved. Presenting evidence in clear, concise, non-technical format can make the difference between effective response and damaging attack. CSIRT teams worldwide use Veriato to gain swift understanding of the size, scope, and severity of insider driven incidents, and to share that understanding quickly and effectively with the extended team to get results.