30 likes | 257 Views
Insider Threat Smart Card. Causes of Insider Threat. Question Your Vigilance. When/where is it low? Team meetings, PT, chow, mission briefings, etc. Do we meet at the same time? Do we meet in the same place? What about my team? Are we all at the meeting? Do we all eat together?
E N D
Insider ThreatSmart Card Causes of Insider Threat Question Your Vigilance When/where is it low? Team meetings, PT, chow, mission briefings, etc. Do we meet at the same time? Do we meet in the same place? What about my team? Are we all at the meeting? Do we all eat together? Are we all at the same brief? Who knows our patterns? Camp workers, interpreters, partner force, local security. • Personal Motivation • Cooption • Infiltration • Impersonation Historically, there are a combination of factors for a single event. Location of Attacks • Inside the Wire - 66% • While on Patrol • During Meetings Special Operations Lessons Learned POC: rullis@ahqb.soc.mil
Insider Threat Things To Look For Tips For Mitigation Designate a Guardian Angel Someone overtly/covertly armed. Monitors others behavior. Establish SOP for Reporting Suspicious Behavior Who do I tell? When/what do I report? Establish Conflict Resolution SOP Many insider threat attacks are prompted by conflicts. Monitor Partners Post-Leave Most cooption occurs after leave. INS threaten partner forces' families. • Proximate Potential • Who has closed the distance to attack? • Closing proximity reduces need for skill. • Strong Points (perceived secure area) • If area is perceived to be secure, vigilance is "expected" to be low. • Habitual Behavior • QRF, KLEs, routine patrols are known and predictable. • Human Behavior • Look for the anomaly. • Trust your Limbic response (6th sense) • If it doesn't feel normal, it's probably not. Special Operations Lessons Learned