Insider Threat
What is Insider Threat?
A security risk that originates from within the organisation, typically from current or former employees, contractors, or business partners who have inside information concerning security practices, data, and computer systems.
Terms that appear alongside insider threat
Each of these is named in at least one of the same controls as insider threat. The number is how many controls name both.
- nist 10 shared controls
- phishing 10 shared controls
- personnel security 9 shared controls
- risk assessment 8 shared controls
- lessons learned 8 shared controls
- cybersecurity 8 shared controls
- insider threat program 8 shared controls
- compliance 7 shared controls
Frameworks that govern insider threat
What the standards actually require on insider threat
Requirements naming insider threat across 6 standards, quoted from the control text.
Implement an incident handling capability for incidents involving insider threats.
NIST800-IR-4(6) · IR-4(6) Incident Handling | Insider Threats →Requirement 0051 (Part Two: Risk, section 7.3 Countering Foreign Interference and Espionage; applies to All entities; dated 31 October 2024;
protective-security-policy-framework-pspf-release-2026::0051 · 0051 Insider threat program for entities managing Baseline to PV clearance subjects →Provide literacy training on recognizing and reporting potential indicators of insider threat.
nist-sp-800-53-revision-5-1-high::AT-2(2) · AT-2(2) Literacy Training and Awareness | Insider Threat →Legal advice is sought regarding the development and implementation of an insider threat mitigation program.
ISM-1626 · Legal advice on insider threat program →Provide awareness training that teaches staff to recognize potential insider threat indicators and to report them.
AT.L2-3.2.3 · Insider Threat Awareness →The organisation implements an insider threat program with a cross-discipline insider threat incident handling team. The GC discussion notes specific notice requirements when monitoring GC networks and devices under the TBS service and digital policy instrumen...
canada-itsp-10-033-security-and-privacy-controls-and-assurance-activities-catalogue::PM-12 · PM-12 Insider threat program →Questions people ask about insider threat
What is Insider Threat?
Why is Insider Threat important for compliance?
Which compliance frameworks address Insider Threat?
Where can I learn more about Insider Threat?
See how Insider Threat applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.