Working Group
Insider Threat Mitigation Practical Tools and Products
The Focus Groups supported the Insider Threat Mitigation International Working Group by conducting in-depth analysis on five key topics identified by participants at the 2019 Symposium: national policy and regulatory frameworks, trustworthiness and reliability, cybersecurity, physical protection and technical measures, and security culture.
Focus Group Products
Personnel Vetting for Nuclear and Radioactive Materials Security
The cornerstone of a robust nuclear security regime is the development of a national legislative and regulatory framework that provides the legal basis for physical protection of nuclear and other radioactive materials. Find out how other INFCIRC/908 member states approach personnel vetting for nuclear and radioactive materials security by reviewing the findings from this 2023 survey.
Behavioral Observation Exercise
This realistic scenario explores employee behavioral changes to determine whether an insider threat is present. Using Mentimeter questions, work to identify whether an employee is a potential insider adversary, what kinds of further investigation might be warranted, and how to get more information about the situation. Exercise materials are available in English, Arabic, and French.
Download Behavioral Observation Exercise English | Arabic | French
Nuclear Facilities: Cybersecurity Critical Positions – Best Practices Guide for Insider Threat Mitigation
While cyber outsider adversaries remain a key concern of nuclear facilities worldwide, the cyber insider adversary poses a unique challenge to operational and security teams. By focusing on critical cybersecurity roles and responsibilities common to most, if not all, nuclear facilities, it is possible to provide practical guidance to prevent and protect against the emergence of a cyber insider threat.
Radiological Facilities: Cybersecurity Critical Positions – Best Practices Guide for Insider Threat Mitigation
Users of radioactive sources, such as research institutes, universities, medical facilities, or commercial companies, need to consider potential cybersecurity risks. In addition to offering mitigation recommendations to associated risks, this document provides practitioners an overview of common cybersecurity roles and responsibilities at radiological facilities that pose unique insider threat mitigation challenges.
Cybersecurity Survey Applied to Nuclear and Radioactive Facilities
This survey provides a way to assess the maturity of a nuclear and radiological facility’s cybersecurity posture. By surveying facility operators, radiation protection officers, security personnel, and operations managers, users can better understand how cybersecurity is handled at a specific facility and begin to identify proactive steps for preventing insider threats. Available in English and Spanish.
Download Cybersecurity Survey English | Spanish
Nuclear Facility Risk Management Exercise: Cybersecurity and the Insider Threat
Cybersecurity isn’t just about outside adversaries. Understand how cybersecurity is affected by an insider attack and walk through a hypothetical scenario from an attacker’s and investigator’s perspective to identify vulnerabilities as well as mitigation opportunities. This exercise is available in long and short versions that can be used in an organization’s training.
Cyber Insider Exercise for Radiological Sources
Cybersecurity isn’t just about outside adversaries. Understand how cybersecurity is affected by an insider attack and walk through a hypothetical scenario from an attacker’s and investigator’s perspective to identify vulnerabilities as well as mitigation opportunities. This exercise is available in long and short versions that can be used in an organization’s training.
International Working Group Events and Materials
Stay on top of IWG developments with regular updates, including newsletters and meeting summaries, which provide insights into recent activities and future plans.