PPT-Evolution of Technical Insider Threat at the FBI

and Lessons Learned Kevin Nesbitt Federal Bureau of Investigation Disclaimer The views expressed in this presentation are those of the presenter and do not reflect the official policy or position of the Department of Justice the Federal Bureau of Investigation or the US Government nor does it represent an endorsement of any kind. March 20, 2015. . UNCLASSIFIED. UNCLASSIFIED. Industrial Security Policy Update. . NISPOM changes . Insider threat-related. Chp. 1. Chp. 3. Chp. 8. Other changes. Chp. 1. New appendix D: NISPOM Supplement. The Insider Threat. An Enterprise Operations . Counterintelligence Presentation. Presented by: Ralph Butler. SSC Counterintelligence Lead. Over. view. . Understanding the Insider Threat. Insider Threat Trends. This research attempts to characterize the insider by drawing on prominent theories from the fields of behavioral theory and psychology to create an insider personality profile. This profile will allow us to understand an insider’s motives and actions. Only then can effective technology solutions be designed to combat the insider threat.. Smart Card . Causes of Insider Threat. Personal Motivation. Cooption . Infiltration. Impersonation. Question Your Vigilance. When/where is it low?. Team meetings, PT, chow, mission briefings, etc.. Do we meet at the same time?. b. y. Ahmad Muhammad. What is an Insider Security Treat. ?. A threat posed by anyone with special or additional access to an organization's protected assets.. A malicious . insider. is an adversary who operates inside the trusted computing base, basically a trusted adversary.. Defense Security Service. Wajih Harroum. CI Special Agent. Defense Security Service. What . is “Insider Threat. ?”. Why . is the Insider Threat significant?. How . do you recognize the Insider . Threat?. Wajih Harroum. CI Special Agent. Defense Security Service. What . is “Insider Threat. ?”. Why . is the Insider Threat significant?. How . do you recognize the Insider . Threat?. How . can you help defeat the Insider Threat?. Program. Donald Fulton. Counterintelligence Programs Manager. Facility Technology Services, Inc.. 1 August 2014 – DSS/NISPOM. Industrial Security Representatives. NISPOM Conforming Change . 2 pending. Combating the ENEMY Within. Mike Kalinowski. Facility Security Officer. iGov Technologies Tampa FL. 1. Insider Threat Briefing. Purpose of Briefing. What is an Insider Threat?. Milestones. Training Requirements. UNCLASSIFIED. Customizable DoD Command Brief. Insider Threat Awareness. DRAFT Command Brief – Insider Threat Awareness Training. UNCLASSIFIED. Your Name and Seal Here. Insider Threat Awareness. At the end of this . Program. Donald Fulton. Counterintelligence Programs Manager. Facility Technology Services, Inc.. 1 August 2014 – DSS/NISPOM. Industrial Security Representatives. NISPOM Conforming Change . 2 pending. Best Practices in Insider Threat Mitigation CSIAC Insider Threat Workshop Randall Trzeciak 15 August 2013 http://www.cert.org/insider_threat/ © 2013 Carnegie Mellon University Except for the U.S. government purposes described below, this material SHALL NOT be reproduced or used in any other manner without requesting formal permission from the Software Engineering Institute at permission@sei.cmu.edu. INSIDER THREAT AWARENESS Combating the ENEMY Within Mike Kalinowski Facility Security Officer iGov Technologies Tampa FL 1 Insider Threat Briefing Purpose of Briefing What is an Insider Threat? Milestones Facebookcom/CISAcisagovLinkedIncom/company/cisagovCentralcisagovcisagovDEFEND TODAYSECURE TOMORROWIeroperbleCommunicationsPhysicalSecurityOTSecuritySupplyChainITSecurityInsiderThreatInsiderThreatINSID