Malicious insiders pose a serious threat to organizations in the public and private sectors. Their authorized access or insider knowledge of critical assets offers them opportunities to compromise information, sabotage infrastructure, or inflict harm upon co-workers. A complacent or uninformed workforce can be equally as damaging by inadvertently allowing easy access to an external threat. Insider threats can be current or former employees, partners, contractors, or family and friends. Regardless of the actor, it is important for organizations to establish an insider threat program that can detect, deter, and prevent insiders from causing harm.
This fact sheet provides some of the Department of Homeland Security resources to help organizations design a comprehensive program that protects against physical and cyber insider threats.