Insider Threat

Other Subjects14 CardsCreated 4 months ago

This deck covers key concepts and scenarios related to insider threats, including potential indicators, reporting responsibilities, and risk factors.

Which of the following scenarios describe a potential insider threat? Select all that apply.

An employee takes a photo at their desk and posts it to social media. Documents marked CONFIDENTIAL are visible in the photo. A project manager at a cleared facility accidentally takes home a document marked Controlled Unclassified Information (CUI).
Tap or swipe ↕ to flip
Swipe ←→Navigate
1/14

Key Terms

Term
Definition
Which of the following scenarios describe a potential insider threat? Select all that apply.
An employee takes a photo at their desk and posts it to social media. Documents marked CONFIDENTIAL are visible in the photo. A project manager at a c...
Which of the following is true about insider threats?
Insider threats can include employees, vendors, contractors, volunteers, and anyone with authorized access to U.S. Government resources.
Jorge's facility received a warning that facilities with their capabilities are at higher risk of adversarial targeting. What types of information at Jorge's facility do adversaries target? Select all that apply.
Personnel lists and facility locations Information related to the facility's methodologies, capabilities, and limitations Countries the facility works...
Which of the following scenarios may be indicative of adversarial targeting? Select all that apply
Your company's sales department receives a purchase request from an unknown vendor. During a conference overseas, a researcher's laptop is stolen. A s...
Kathryn is an avid fantasy football fan and contributes $20 to a pool every week where the winner takes all. She drinks moderately on the weekends. Based on this information, might she be at increased risk of becoming an insider threat?
It's NOT - "Maybe. Kathryn should be reported to the Insider Threat Program to determine if her outside activities warrant concern."
Tim is experiencing a lot of stress. His engagement was called off, and he was denied a promotion at work. He recently purchased an expensive car. What potential insider threat risk indicators does Tim exhibit? Select all that apply.
Financial issues: He purchased sports car. Professional issues: He didn't get the promotion he wanted. Personal issues: His engagement was called off.

Related Flashcard Decks

Study Tips

  • Press F to enter focus mode for distraction-free studying
  • Review cards regularly to improve retention
  • Try to recall the answer before flipping the card
  • Share this deck with friends to study together
TermDefinition
Which of the following scenarios describe a potential insider threat? Select all that apply.
An employee takes a photo at their desk and posts it to social media. Documents marked CONFIDENTIAL are visible in the photo. A project manager at a cleared facility accidentally takes home a document marked Controlled Unclassified Information (CUI).
Which of the following is true about insider threats?
Insider threats can include employees, vendors, contractors, volunteers, and anyone with authorized access to U.S. Government resources.
Jorge's facility received a warning that facilities with their capabilities are at higher risk of adversarial targeting. What types of information at Jorge's facility do adversaries target? Select all that apply.
Personnel lists and facility locations Information related to the facility's methodologies, capabilities, and limitations Countries the facility works with
Which of the following scenarios may be indicative of adversarial targeting? Select all that apply
Your company's sales department receives a purchase request from an unknown vendor. During a conference overseas, a researcher's laptop is stolen. A scientist at your facility receives an unsolicited request to review a research paper.
Kathryn is an avid fantasy football fan and contributes $20 to a pool every week where the winner takes all. She drinks moderately on the weekends. Based on this information, might she be at increased risk of becoming an insider threat?
It's NOT - "Maybe. Kathryn should be reported to the Insider Threat Program to determine if her outside activities warrant concern."
Tim is experiencing a lot of stress. His engagement was called off, and he was denied a promotion at work. He recently purchased an expensive car. What potential insider threat risk indicators does Tim exhibit? Select all that apply.
Financial issues: He purchased sports car. Professional issues: He didn't get the promotion he wanted. Personal issues: His engagement was called off.
Samara is a DOD employee. A coworker recently discovered that she stays much later than usual, often working hours later than the rest of her team though her team is not authorized to work additional hours or overtime. What should her coworker do?
Report it. It is everyone's responsibility to report concerning behavior.
Justin is upset that he wasn't assigned the new radar project. He is very interested in the technology. He constantly asks his teammate Claire to share classified, project-related information with him, though he is not on the project and doesn't have a need-to-know. What should Claire do?
Report it. Seeking classified information without a need-to-know is a reportable behavioral indicator.
Farrah hears a co-worker, upset with his boss, say, "If I had a gun, I would shoot her!" What should Farrah do and why?
Report it. Threatening violence is a reportable behavioral concern.
Tony is stressed out about his contract ending and is worried about finding a new job. He is missing meetings and snapping at co-workers. What should Tony's boss do to create a better outcome for Tony and the organization?
Refer him to the Employee Assistance Program (EAP).
Your agency was the target of sabotage. Who is responsible for reporting the potential threat? Select all that apply.
Security personnel Employees Leadership personnel Human Resources
Rose is a federal agency employee. She was targeted by a foreign collection attempt. To whom should Rose report a potential threat?
Insider Threat Program, security office, or supervisor
Consider the following. What must contractors report? Select all that apply.
Events that impact the status of the facility Events that impact the status of an individual's personnel security clearance Anything that affects the proper safeguarding of classified/proprietary information Indications that classified/proprietary information has been lost or compromised
Pauline works for a cleared defense contractor and has been granted Secret eligibility. Her coworkers observed her using a flash drive without authorization. She also sought classified data without the need-to-know. To whom should her coworkers report this behavior?
Insider Threat Program Senior Official (ITPSO) or Facility Security Officer (FSO)