Insider Threat Job Aids
Insider Threat Programs are designed to deter, detect, and mitigate actions by insiders who represent a threat to national security.
 

The Critical Pathway - Facilitated Discussion Guide
PDF icon March 2024, 6 pages. This guide is a companion document to the Insider Threat Vigilance Video Series. All four episodes can be presented to a training audience for a guided discussion.

Turning People Around, Not Turning Them In - Facilitated Discussion Guide
PDF icon March 2024, 6 pages. This guide is a companion document to the Insider Threat Vigilance Video Series. All four episodes can be presented to a training audience for a guided discussion.

Why Threats of Violence Are Not Protected
PDF icon December 2023, 1 page. This job aid provides examples of case law that identify situations where speech that includes threats of violence may not be protected under the first amendment.

2024 Insider Vigilance Campaign
PDF icon December 2023, 2 pages. A vigilance campaign helps implement Insider Threat Awareness training. Vigilance campaigns are loaded with awareness resources to share within an organization. Use what we have created for 2024 to jump-start your annual campaign.

Privacy Act Consent Rule Exceptions
PDF icon November 2023, 1 page. “No agency shall disclose any record which is contained in a system of records by any means of communication to any person, or to another agency, except pursuant to a written request by, or with the prior written consent of, the individual to whom the record pertains [subject to 12 exceptions].” This job aid lists the 12 exceptions.

Freedom of Information Act (FOIA) Exemptions
PDF icon November 2023, 3 pages. This job aid provides information about the nine exemptions congress established under the Freedom of Information Act (FOIA).

The Principle of Confidentiality
PDF icon November 2023, 1 page. This job aid lists the principles of confidentiality with respect to the insider threat program.

Insider Threat Indicators in UAM
PDF icon June 2023, 7 pages. This job aid discusses Insider Threat policies and procedures for User Activity Monitoring (UAM) on classified networks in support of Insider Threat Programs. Logging, monitoring, and auditing of information system activities can lead to early discovery and mitigation of behavior indicative of insider threat. UAM also plays a key role in prevention, assistance, and response (PAR) capabilities to insider kinetic violence threats.

Insider Threat Reporting Procedures
PDF icon June 2023, 4 pages. This job aid provides information on reporting to Insider Threat Programs for employees with Department of Defense, Cleared Industry, and Federal Agencies.

Section 811 Referral
PDF icon June 2023, 3 pages. This quick decision guide outlines some thresholds federal agencies may use when reporting to the FBI, potentially generating what is known as an 811 Referral.

Insider Risk Programs for the Healthcare and Public Health Sectors
PDF icon June 2023, 17 pages. This job aid provides guidance for healthcare and public health practitioners and facilities. It supports the development and implementation of Insider Risk programs within these critical organizations.

Insider Risk Implementation Guide for Food and Agriculture
PDF icon June 2023, 11 pages. This job aid provides guidance for food and agriculture facilities and organizations. It supports the development and implementation of insider risk programs with these critical organizations.

Workplace Environment and Organizational Justice
PDF icon May 2023, 10 pages. This job aid discusses how a positive workplace environment can affect employees.

Honor in Hindsight - Facilitated Discussion Guide
PDF icon April 2023, 6 pages. This guide is a companion document to the Insider Threat Vigilance Video Series. All four episodes can be presented to a training audience for a guided discussion.

Insider Threat Fraud
PDF icon December 2022, 10 pages. This insider threat fraud job aid provides information relating to fraud and its relevance to insider threat.  This product provides information that is useful to the counter-insider threat practitioner, organizational members and leaders in countering the risk of fraud perpetrated by insiders with trusted access.

Sample Insider Threat Program Plan for Industry
PDF icon December 2022, 10 pages. This job aid provides a sample of how a plan can be tailored to the specific Insider Threat Program procedures and processes in place at your company. It also provides additional guidance and resources for developing a plan. It is not intended for use as a template.

Customizable DOD Command Brief for Insider Threat Awareness
PPT icon November 2022, 31 pages. The customizable presentation can be used by your organization to provide in person Insider Threat Awareness briefings.  The briefing meets National Minimum Standards for insider threat awareness training and includes a practical exercise with instructor guide.

Employment Application Risks and Mitigation for Insiders with National Security Eligibility 
PDF icon July 2022, 10 pages. The purpose of this job aid is to help insiders with National Security Eligibility understand the risks associated with job searching; to provide guidance on how to be vigilant of threats and evade targeting by malicious actors, while seeking employment. The information in this job aid includes, but is not limited to: mindfulness of posting sensitive information on resumes, vetting and conducting research on recruiters and potential employers, understanding your Non-Disclosure Agreement, requesting a pre-publication or security review and resources for further exploitation and awareness.

An Insider's Digital Footprint and Associated Risks
PDF icon July 2022, 9 pages. The purpose of this job aid is to help insiders to understand the digital footprint and vulnerabilities associated with internet activities.

Insider Threat Program (ITP) for Industry
PDF icon May 2022, 21 pages. This job aid provides information on establishing an Insider Threat Program, conducting Insider Threat training, the requirements, definitions and resources and more.

Potential Risk Indicators: Targeted Violence
PDF icon May 2022, 7 pages. This job aid provides an introduction to the Pathway to Violence, "The FBI Top 21 Concerning Behaviors," and pertinent data related to concerning behaviors displayed by active shooters. The information in this job aid can help the workforce to identify potential risk indicators of targeted violence, and understand the importance of supporting colleagues and their organizations through reporting concerning behaviors.

Insider Threat and Extremism Within the DOD
PDF icon May 2022, 46 pages. This Insider Threat briefing provides important updates to DOD Instruction 1325.06, focused on extremist activity. It also includes the Domestic Violent Extremism (DVE) landscape, past and recent extremist cases within the DOD, and data and trends. This briefing is for commanders, senior officials, and security or insider threat program personnel to develop workforce awareness on the threat of extremist activity within the DOD.
 

Potential Risk Indicators: Insider Threat
PDF icon November 2021, 11 pages. Most insider threats exhibit risky behavior prior to committing negative workplace events. If identified early, many risks can be mitigated before harm to the organization occurs.  This job aid provides information on insider threat potential risk indicators.

Potential Risk in Informal Banking and Finance
PDF icon July 2021, 9 pages. This job aid will focus on the cultural practice of informal banking and how participation in informal financial practices may increase an insider’s potential risk of becoming an insider threat.

Cultural Competence and Insider Risk
PDF icon April 2021, 4 pages. This job aid addresses the intersection of cultural competence and organizational risk. A real-world example is provided.

Tales from the Inside Volume 4
PDF icon December 2020, 1 page. Everyone needs help sometimes! This job aid provides vignettes of real-world events. It highlights a positive outcome of insider threat program risk mitigation. The names of all subjects and the organization have been anonymized to protect privacy.

Tales from the Inside Volume 3
PDF icon November 2020, 1 page. Watch out for spills! This job aid provides vignettes of real-world events. It highlights a positive outcome of insider threat program risk mitigation. The names of all subjects and the organization have been anonymized to protect privacy.

Insider Threat Definitions
PDF icon April 2020, 32 pages. This job aid provides information on Insider Threat terminology and definitions.

Insider Threat Vigilance Campaign Guidance
PDF icon February 2020, 6 pages.

Insider Threat Essential Body of Knowledge: Deskside Reference
PDF icon January 2020, 20 pages. This job aid maps counter-insider threat technical competencies and areas of expertise to CDSE training resources. These materials have been recognized as potential preparatory resources and as acceptable sources of professional development units for those maintaining certification.

Human Resources and Insider Threat Programs
PDF icon January 2020, 1 page. This job aid provides information on the role and importance of human resources to an effective multi-disciplinary insider threat program.

Insider Threat Program Targeted Violence Self-Assessment: Lessons Learned from School Safety
PDF icon December 2019, 2 pages. This job aid provides lessons learned from school safety program studies for organizations to consider in self-assessment of their insider threat programs' preparation and response to the threat of targeted violence.

Tales from the Inside: Volume 2
PDF icon December 2019, 1 page. Sometimes it really is a "state of mind." This job aid provides a vignette of a real-world event. It highlights a positive outcome of insider threat program risk mitigation. The names of all subjects and the organization have been anonymized to protect privacy.

Behavioral Science and Insider Threat
PDF icon November 2019, 2 pages. This job aid provides information on the role behavioral science plays in a multi-disciplinary insider threat program

Insider Threat Resources for Industry Senior Officials
PDF icon June 2019, 4 pages. This brochure describes resources available to Senior Officials, to meet Industry needs during the development or maturation of Insider Threat Programs.

Insider Threat Programs for the Critical Manufacturing Sector—Implementation Guide
PDF icon May 2019, 17 pages. This job aid is a collaboration between the DHS Cyber and Infrastructure Agency and the DCSA Center for Development of Security Excellence.  It provides guidance and information for critical manufacturing organizations to establish insider threat programs.

Privacy and Civil Liberties Case Law Examples
PDF icon May 2019, 5 pages. This job aid gives examples of court decisions that have provided protection of privacy and civil liberties.

Whistleblower Protection Policies and FAQs
PDF icon May 2019, 1 page. This job aid lists resources and answers frequently asked questions about Whistleblower Protection Policies.

Critical Thinking Tools for Insider Threat Analyst
PDF icon May 2019, 4 pages. This job aid provides a list of insider threat critical thinking tools and how to use them.

Critical Thinking Techniques for Insider Threat Analyst
PDF icon May 2019, 2 pages. This job aid provides a list of skills insider threat analysts need to develop in order to accurately interpret evidence.

Tales from the Inside: Volume 1
PDF icon April 2019, 1 page. This job aid provides a vignette of a real world event. It highlights a positive outcome of insider threat program risk mitigation. The name of the SUBJECT and the organization have been anonymized to protect privacy.

Insider Threat Virtual Forum Guidance
PDF icon June 2018, 1 page. This job aid provides guidance for conducting an Insider Threat Virtual Forum.

DOD Component Insider Threat Training Requirements and Resources
PDF icon March 2017, 3 pages. This job aid provides information on Insider Threat program management personnel training requirements and resources.

Foreign Intelligence Entity Targeting Recruitment Methodology
PDF icon March 2016, 1 page. Intelligence officers spot and assess individuals for potential recruitment.

Understanding Espionage and National Security Crimes
PDF icon April 2015, 2 pages. This job aid provides information on understanding espionage and national security crimes.