Insider Threat Resources

SERC’s Insider Threat Resources provide guidance, best practices, and training to help organizations prevent, detect, and mitigate insider risks. Explore toolkits, policies, and awareness programs to strengthen defenses against both malicious and unintentional insider threats that can impact the bulk electric system.

Learn More About Us

Page Link

Understanding Malicious and Unintentional Insider Threats

An Unintentional Insider is one that did not have malicious intent but may still increase risk or cause harm.

The three Pillars of Cybersecurity are to protect the confidentiality, integrity, and availability of the organization’s information or information systems. Insiders, whether malicious or not, may have cyber and/or physical access to disrupt cyber systems and cause adverse impacts to the bulk electric system by impacting one of the three pillars.

A Malicious Insider is a current or former employee, contractor, or business partner who:

Has or had authorized access to an organization’s network, system or data

Through their actions intentionally exceed or misuse that access in a manner that had malicious intent to harm the organization

Did You Know?

September is Insider Threat Awareness Month

About the National Insider Threat Awareness Month (NITAM) (usalearning.gov)

October is Cyber Security Awareness Month

Cybersecurity Awareness Month | CISA

Resources

Insider Threat Concepts

CERT website

(Software Engineering Institute (SEI) of Carnegie Mellon and CERT is part of SEI.)

CERT Common Sense Guide to Mitigating Insider Threats

21 Best Practices

The National Insider Threat Task Force

Website

Building an Insider Threat Program

Executive Order 13587

Structural Reforms to Improve the Security of Classified Networks and the Responsible Sharing and Safeguarding of Classified Information requires government agencies that handle classified information to stand up an Insider Threat Program (InTP) and designate a senior official to be the agency’s InTP Manager.