The INSA Security Policy Reform Council established the Insider Threat Subcommittee following a series of unauthorized disclosures of highly classified information and the 2013 Washington Navy Yard shooting. The goal of the Subcommittee’s work is to enhance the effectiveness, efficiency, and security of both government agencies and the private sector, as well as to foster more effective and secure partnerships between the public, private, and academic sectors. The Subcommittee has had a direct impact on U.S. policy and legislation through its work. In late 2015, the Subcommittee worked closely with the Defense Security Service (DSS) and the ODNI’s National Counterintelligence and Security Center (NCSC) to refine the definition of insider threat in a way that is relevant to all U.S. government agencies and private companies – not exclusively the national security sector. The Subcommittee’s comprehensive definition, which had widespread support in government and industry, was incorporated into the National Defense Authorization Act for Fiscal Year 2017. Learn more about the Subcommittee's mission and goals.
Threat & Fraud Solutions Manager, National Security and Justice, IBM Federal Analytics
Director, Government & Industry Relations, Perspecta
All organizations are vulnerable to insider threats, whether it is a careless employee unintentionally clicking on a phishing email or a disgruntled staffer revealing classified information to a competitor. However, the harm from these threat actors can be substantial, from shaken consumer confidence to millions of dollars ...
INSA's Insider Threat Subcommittee has released this report that provides recommendations on how the Director of National Intelligence can work with the Defense Department in order to effectively leverage publicly available electronic information for security clearances and to mitigate insider threats.
A wide array of data analytics methods, tools, and techniques exist to improve the detection and mitigation of insider threats – trusted employees who seek to steal an organization’s data or intellectual property or to harm an organization or its staff. Determining which data analytics methods and software tools are bes ...
A new INSA white paper that integrates several accepted psychological constructs into a behavioral model that can be adapted for practical use and suggests new tools to mitigate threats from insiders who may intentionally decide to harm their organization or U.S. national security.
In November 2015, the INSA Insider Threat Subcommittee, under the auspices of the Security Policy Reform Council (SPRC), undertook an initiative to refine the definition of Insider Threat.
The Cipher Brief published an INSA op-ed on Tuesday, June 26, 2018, encouraging companies to view measures to mitigate insider threats as a long-term investment in organizational security and brand preservation.
"The American public has grown increasingly accustomed to the revelation of national security secrets, and leakers are lauded as heroes exposing government abuses," writes INSA senior intelligence adviser Charlie Allen. "In doing so, society marginalizes the detrimental impact to national security."
On April 10, 2017, INSA hosted "Unprecedented Counterintelligence Threats: Protecting People, Information, and Assets," a symposium for industry and government to discuss best practices for insider threat programs, supply chain security, the OPM breach, and more. National Counterintelligence Executive Bill Evanina keynoted. ...
