Insider Threat Awareness – Flashcards

An insider is defined as any person with authorized access to any united states government resource to include personnel, facilities information, equipment, networks, or systems

Which of the following are insider threats : Fort Hood shootings Greg Chung - Economic Espionage Wiki Leaks

Which of the following should be considered as reportable indicators of possible insider threats?

During the spot and assessment phase of the recruitment, the foreign intelligence service will often explore potential exploitable weakness which may be used as a lever against the recruit if needed later

Exploitable weaknesses by a foreign intelligence service when a considering a source for recruitment may include

Unauthorized downloads or copying of files, especially for employees who have given notice of employment termination, is an indicator of a possible insider threat

Insider threat policy is only applicable to classified information. Sensitive, propriety, or need to know information is not currently protected by the insider threat program policy.

Contact with a n individual who is known to be, or is suspended of being, associated with foreign intelligence, security, or terrorism, should always be considered a reportable indicator of a possible recruitment

Insiders work alone. They never recruit because it increases the chancer of them being caught.

Attempting to gain access to an unclassified automated information system without authorization may be considered an information collection indicator.

Which of the following could be considered a possible indicator of an insider threat ?

An insider threat is anyone with authorized access to the information or things an organization values most, and who uses that access, either wittingly or unwittingly, to inflict harm to the organization or national security. When an insider becomes a threat, it can have far-reaching consequences on both an organization and national security.