framework

Insider Threat Mitigation Guide

A voluntary CISA guidance document for building and running insider threat programs, covering behavioral indicators, physical and digital access control, and the human resources side of managing risk from trusted people. First issued in 2020 and aimed at organizations of any security maturity.

Known aliases

CISA Insider Threat Mitigation Guide

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

CISA adds AI deception and adverse separations to the insider threat guide it wrote in 2020

The September 9 revision updates CISA's 2020 text on its own timeline, with no deadline attached and no incident behind it, and the topics CISA chose to add read as a checklist of the assumptions most insider threat programs have not revisited.

Publishers:infosecurity-magazine.com

Reality

Evidence52
Adoption: Insufficient
Hype gap+14
Incentives34
Confidence58