A new INSA white paper that integrates several accepted psychological constructs into a behavioral model that can be adapted for practical use and suggests new tools to mitigate threats from insiders who may intentionally decide to harm their organization or U.S. national security. ...
The Homeland Enterprise consists of a vast series of formal and informal relationships between federal departments and agencies; state, local, tribal, and territorial (SLTT) entities; and the private sector. Each of these entities and relationships – some long-established, others newly emergent – contribute to the body of information that is collected and analyzed to produce the intelligence necessary to protect the U.S. homeland. INSA’s Homeland Security Intelligence Council (HSIC) conducted in ...
Since 2013, the Intelligence and National Security Alliance (INSA) Cyber Intelligence Task Force has presented foundational thinking and approaches to the discipline, paying particular attention to how cyber intelligence functions at the strategic and operational levels within an organization, with white papers published in March and October of 2014, respectively. This paper, the fourth in the series, will concentrate on tactical cyber intelligence, which addresses the daily management of cyber ...
In November 2015, the INSA Insider Threat Subcommittee, under the auspices of the Security Policy Reform Council (SPRC), undertook an initiative to refine the definition of Insider Threat. ...
Though essential to an organization’s cyber activities, cyber intelligence as a professional discipline is relatively emergent, particularly its unique tradecraft – a blend of technical knowledge (e.g., network operations, communications, and perhaps digital forensics or malware reverse engineering) and classic analytic skills (e.g., hypothesis and alternative testing). Cyber intelligence – assessing an adversary’s capabilities, intentions, and activities in the cyber domain – should support and ...
The third white paper in the “Levels Of Cyber Intelligence” series – While much attention has been paid to cyber attacks against organizations of all sizes and from across all sectors, there has been less discussion of how organizations can strengthen their risk management processes in such a diverse and evolving threat climate. Operational cyber intelligence encompasses an understanding of both tactical means – how cyber threats function to disrupt and/or degrade an organization’s networks and ...
In April 2014 the INSA Homeland Security Intelligence Council conducted a tabletop exercise to examine the current response procedures and information sharing policies amongst government, law enforcement, the private sector and the public in the context of a homegrown violent extremist (HVE) threat. More than a dozen government and law enforcement agencies participated in the tabletop exercise. DOWNLOAD NOW ...
Following its February 2013 white paper on the Intelligence Community Information Technology Enterprise (IC ITE), IC ITE – Doing in Common What Is Commonly Done, the INSA IC ITE Task Force conducted four panel discussions on areas identified as essential to IC ITE’s success: the governance model, the business model, security and risk management, technology and innovation. DOWNLOAD NOW ...
Current budget realities make clear that resources available for intelligence activities will continue to decline in the near-term. Since the publication of the INSA white paper Smart Change in May 2011, the IC has experienced the initial effects of sequestration, the furlough of some parts of the workforce, contract employees unable to perform important services without government supervision, a 16-day government shutdown, and the realities of a significantly reduced budget—all at a time when t ...
The Intelligence and National Security Alliance (INSA) Cyber Intelligence Task Force defined the strategic, operational, and tactical levels of Cyber Intelligence in its white paper The Operational Levels of Cyber Intelligence. While much attention has been directed towards the tactical, on-the-network cyber domain, this paper contends that not enough resources have been devoted to strategic cyber intelligence. DOWNLOAD NOW ...
