The INSA Security Policy Reform Council established the Insider Threat Subcommittee following a series of unauthorized disclosures of highly classified information and the 2013 Washington Navy Yard shooting. The goal of the Subcommittee’s work is to enhance the effectiveness, efficiency, and security of both government agencies and the private sector, as well as to foster more effective and secure partnerships between the public, private, and academic sectors. The Subcommittee has had a direct impact on U.S. policy and legislation through its work. In late 2015, the Subcommittee worked closely with the Defense Security Service (DSS) and the ODNI’s National Counterintelligence and Security Center (NCSC) to refine the definition of insider threat in a way that is relevant to all U.S. government agencies and private companies – not exclusively the national security sector. The Subcommittee’s comprehensive definition, which had widespread support in government and industry, was incorporated into the National Defense Authorization Act for Fiscal Year 2017. Learn more about the Subcommittee's mission and goals.
Senior Manager, Office of Confidentiality and Privacy, Deloitte LLP
Threat & Fraud Solutions Manager, National Security and Justice, IBM Federal Analytics
A wide array of data analytics methods, tools, and techniques exist to improve the detection and mitigation of insider threats – trusted employees who seek to steal an organization’s data or intellectual property or to harm an organization or its staff. Determining which data analytics methods and software tools are bes ...
A new INSA white paper that integrates several accepted psychological constructs into a behavioral model that can be adapted for practical use and suggests new tools to mitigate threats from insiders who may intentionally decide to harm their organization or U.S. national security.
In November 2015, the INSA Insider Threat Subcommittee, under the auspices of the Security Policy Reform Council (SPRC), undertook an initiative to refine the definition of Insider Threat.
With Executive Order 13587 in 2011, the Federal government demonstrated increased attention to its insider threat mitigation programs. However, no mandates, standards, or benchmarks exist for insider threat programs in the private sector. Therefore, it is difficult for companies to assess where their insider threat mitigati ...
The Cipher Brief published an INSA op-ed on Tuesday, June 26, 2018, encouraging companies to view measures to mitigate insider threats as a long-term investment in organizational security and brand preservation.
"The American public has grown increasingly accustomed to the revelation of national security secrets, and leakers are lauded as heroes exposing government abuses," writes INSA senior intelligence adviser Charlie Allen. "In doing so, society marginalizes the detrimental impact to national security."
On April 10, 2017, INSA hosted "Unprecedented Counterintelligence Threats: Protecting People, Information, and Assets," a symposium for industry and government to discuss best practices for insider threat programs, supply chain security, the OPM breach, and more. National Counterintelligence Executive Bill Evanina keynoted. ...
