Insider Threat Mitigation Resources
As threat environments and malicious actors evolve, staying ahead of them requires constant awareness and implementing good practices. These tools, products, and resources help mitigate insider threats, communicate potential risks to leadership, and more.
Publications
Find guidance, reports, and frameworks that present good practices for mitigating insider threats. These materials may help organizations develop and implement insider threat mitigation measures.
Enhancing Nuclear Security Culture in Organizations Associated with Nuclear and Other Radioactive Material
International Atomic Energy Agency, 2021
Preventative and Protective Measures Against Insider Threats
International Atomic Energy Agency, 2020
Assessing Continuous Evaluation Approaches for Insider Threats
RAND Corporation, 2019
Communicating Insider Threat Risk to Organizational Leaders
The Threat Lab, 2019
Understanding the Role of Behavioral Scientists in Insider Threat Programs
The Threat Lab, 2019
A Strategic Plan to Leverage Social and Behavioral Sciences to Counter the Insider Threat
Defense Personnel and Security Research Center, 2018
Insider Threat Program: Maturity Framework
National Insider Threat Task Force, 2018
Insider Threat Program: Maturity Framework Frequently Asked Questions
National Insider Threat Task Force, 2018
Insider Threat Guide: A Compendium of Best Practices to Accompany the National Insider Threat Minimum Standards
National Insider Threat Task Force, 2017
Protect Your Organization from the Inside Out: Government Best Practices
National Insider Threat Task Force, 2016
Tackling Terrorism Together: Vigilance, Prevention, and Protection Against the Terrorist Threat
Secrétariat Général de la Défense et de la Sécurité Nationale, 2016
Corporate Knowledge for Government Decisionmakers: Insights on Screening, Vetting, and Monitoring Processes
RAND Corporation, 2020
Organizations
Develop and implement insider threat mitigation measures with trainings, workshops, and events that focus on identifying vulnerabilities, establishing an effective security culture, and staying current with good practices.
