Insider Threat Awareness

Question 1

DoD Directive 5205.16 defines Insider as:

Answer 1

Any person with authorized access to DoD resources by virtue of employment, volunteer activities, or contractual relationship with DoD. This can include employees, former employees, consultants, and anyone with access.

Question 2

The National Insider Threat Task Force (NITTF) defines an insider threat as:

Answer 2

The threat that an insider will use his or her authorized access, wittingly or unwittingly, to do harm to the security of the United States. This threat can include damage through espionage, terrorism, unauthorized disclosure of national security information, or through the loss or degradation of department resources or capabilities.

Question 3

What are the five main NITTF categories of insider threat?

Answer 3

Leaks: Intentional or unauthorized disclosure of classified or proprietary information to person or org who does not have a need–to–know.

Spills: Unintentional transfer of classified or proprietary information to unaccredited or unauthorized systems, individuals, applications or media (doesn’t have to be intentional–is most common)

Espionage: The unauthorized transmittal of classified or proprietary information to a competitor, foreign nation or entity with the intent to harm.

Sabotage: To deliberately destroy, damage, or destruct, especially for political or military advantage. Although sabotage is often conducted for political or military reasons, other motivations can include personal disgruntlement.

Targeted violence: Any form of violence that is directed at an individual or group, for a specific reason. Not a random act.

Question 4

Categories of Targeted Violence

Answer 4

Active shooter
domestic violence
harassment
hostile work environment
sexual assault
stalking
threats/threatening behavior
workplace bullying/violence

Question 5

Insider Threat Vulnerabilities

Answer 5

Disgruntlement

Question 6

Terms for reporting requirements

Answer 6

Contact: Any association, connection, or communication with another individual occurring in person or via any form of technology

Foreign national: any person who is not a U.S citizen, or in some instances, possesses dual citizenship. Legal permanent residents are foreign nationals

Personal Info: Identifying info which is not commonly known or readily and publicly available, such as name, address, or occupation. Information which a foreign national could use to exploit vulnerabilities for CI or security reasons.