Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for...
Transcript of Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for...
![Page 1: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/1.jpg)
Insider ThreatCreating an
Program
![Page 2: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/2.jpg)
Donald FultonCounterintelligence Programs Manager
Facility Technology Services, Inc.
![Page 3: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/3.jpg)
• 1 August 2014 – DSS/NISPOM
• Industrial Security Representatives
• NISPOM Conforming Change 2 pending
• ????
Insider Threat
![Page 4: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/4.jpg)
• History• Key Terms• Purpose• Documents• Resources• Requirements• Recommendations
Agenda
![Page 5: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/5.jpg)
The Reason
• Arrested 27 May 2010• 700,000 documents• Found guilty on 17 counts• Sentenced to 35 years
PFC Bradley Manning
![Page 6: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/6.jpg)
Insider Threat
• Intelligence Analyst• TS/SCI eligibility
• Emotional instability• Security Violations• Personal and government IT• Behavioral Problems/Assault• Poor security practices in unit
![Page 7: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/7.jpg)
• 7 October 2011• Structural Reforms to Improve the
Security of Classified Networks and the Responsible Sharing and Safeguarding of Classified Information
• National Insider Threat Task Force• Shall be binding on the executive branch
E.O. 13587
![Page 8: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/8.jpg)
• National Insider Threat Task Force• US Attorney General• Federal Bureau of Investigation• Director National Intelligence• National Counterintelligence Executive
• Assist agencies in developing and implementing their insider threat programs,
• National Insider Threat Policy
NITTF
![Page 9: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/9.jpg)
• National Insider Threat Policy• NITTF• November 2012• Minimum Standards
Policy
![Page 10: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/10.jpg)
Acts of commission or omission by an insider who intentionally or unintentionally compromises or potentially compromises DoD’s ability to accomplish its mission. These acts include, but are not limited to, espionage, unauthorized disclosure of information, and any other activity resulting in the loss or degradation of departmental resources or capabilities.
DoD Definition
![Page 11: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/11.jpg)
• Deter, detect, and mitigate compromises of classified information by malicious insiders
• Safeguarding classified information from exploitation, compromise, or unauthorized disclosure
• Does not erode civil liberties, civil rights, or privacy protections for government employees
Purpose
![Page 12: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/12.jpg)
• Designate insider threat senior official • Annual Reporting• Oversight mechanism• Analytic capability• Establish reporting procedures• Fully trained Insider Threat personnel (NITTF)• Access to employee information• Network monitoring (AIS)• Employee training and awareness• Six months to implementMinimum
Requirements
![Page 13: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/13.jpg)
• Designate Insider Threat Senior Official • Annual Reporting Oversight mechanism• Analytic capability Establish reporting procedures• Fully trained Insider Threat personnel (NITTF)• Access to employee information• Network monitoring (AIS) Employee training and awareness• Six months to implement
Don’t Panic
![Page 14: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/14.jpg)
{ {Reporting• Disregard for security
practices• Suspicious
behavior/contacts• Attempts to expand
access• Financial vulnerabilities• Foreign influence of
connections
Network Monitoring• Attempts to expand
access• Disregard for security
practices• Network misuse• Removing/
downloading classified
Insider Threat
![Page 15: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/15.jpg)
• EO 13587• National Insider Threat Policy and
Minimum Standards
• Insider Threat Senior Official Appointment Letter
• Insider Threat Awareness Training• Company Insider Threat Policy• Company Insider Threat Annual Report
Documents
![Page 16: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/16.jpg)
• National Insider Threat Task Force• http://ncsc.gov/nittf/index.php
• Center for Development of Security Excellence• http://www.cdse.edu
• Defense Security Service• http://www.dss.mil/index.html
Resources
![Page 17: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/17.jpg)
• Cleared at the same level as Facility Clearance• Senior Management/KMP level• May be Facility Security Officer
• Company Senior Leadership must support• Must have appropriate authority
Senior Official
![Page 18: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/18.jpg)
• Within 30 days for initial• Annual refresher
• Mirrors current NISPOM requirement for security training
Training
![Page 19: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/19.jpg)
Insider ThreatSenior Official
Human Resources Personnel Security Physical Security Network Monitoring
Employee Reporting
Disciplinary ActionCounterespionage
Investigation
Reporting
Potential Threat Activity
![Page 20: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/20.jpg)
Insider Threat
Analysis
Physical Security
Human Resources
Information Technology
Legal/Law Enforcement
Counterintelligence
Analysis
![Page 21: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/21.jpg)
• History• Key Terms• Purpose• Documents• Resources• Requirements• Recommendations
Agenda
![Page 22: Insider Threat - Northeast Maryland Security Council · PPT file · Web view. Center for Development of Security Excellence. . Defense Security Service. . Resources. Cleared at the](https://reader035.fdocuments.us/reader035/viewer/2022081605/5ac618067f8b9a2b5c8df9a3/html5/thumbnails/22.jpg)
Questions
Donald FultonCounterintelligence Programs Manager
Facility Technology Services, Inc.
[email protected] Ext. 2206
http://factechs.com/