The most vulnerable agencies will be those:
- who hold a lot of identity data, particularly when systems can be accessed by many employees
- with decision-making and regulatory powers, including those agencies overseeing the security, construction, planning, development, sex work, gaming and liquor industries
- with access to sensitive information, including law enforcement information.
Organised crime groups may try to develop relationships with public sector employees by:
- targeting those with risk-taking behaviour such as illicit drug use or problem gambling, which can make them vulnerable to coercion or manipulation
- using social media to identify and target public sector employees
- developing relationships to shift a public sector employee’s loyalty away from their employer,
- persuading the target that ‘helping a friend’ is the right thing to do
- creating shared interests within the broader community by interacting with public sector employees at places like fitness clubs, tattoo parlours, body building and martial arts venues, or sports clubs.