Behavioral Science and Insider Threat Course

Flashcards covering key definitions and concepts from the Behavioral Science and Insider Threat course, including definitions of insider threat, behavioral science, organizational culture, the critical pathway elements, and the role of behavioral scientists in mitigation programs.

Insider Threat

The threat insiders pose to DoD and U.S. Government installations, facilities, personnel, mission, or resources, including damage through espionage, terrorism, unauthorized disclosure, or loss/degradation of resources or capabilities (DoD Directive 5205.16).

Insider Threat Programs (ITPs)

Required for federal agencies, DoD components, and cleared industry, these programs utilize a multi-disciplinary approach to detect, deter, and mitigate insider threats, involving various professionals including behavioral scientists.

Behavioral Science

A branch of science (such as psychology, sociology, or anthropology) that primarily deals with human action and often seeks to generalize about human behavior in society.

Organizational Culture

The set of underlying beliefs, assumptions, values, and norms of interaction which contribute to the unique social and psychological environment of an organization.

Role of Behavioral Scientists in ITPs

Help identify, explain, and contextualize concerning behaviors; provide expert consultation, training, and customized analytical tools; and operationalize research to enhance deterrence, detection, and mitigation efforts.

National Insider Threat Task Force (NITTF) Maturity Framework

Emphasizes the importance of continuing education in behavioral sciences and incorporating behavioral science expertise due to the human-centric nature of insider threat.

Reverse Engineering Cases (List Development)

An approach to developing insider threat indicators by identifying and studying precursors to action in known insider threat cases.

Rational Approach (List Development)

An approach to developing insider threat indicators where a subject matter expert (SME) relies on logic and experience.

Science (List Development)

An approach to developing insider threat indicators that focuses on identifying items that discriminate between good and bad actors, acknowledging the complexity and inconsistency of human behavior.

Indicator

An observable or reportable behavior or activity that may suggest potential insider risk.

Critical-Path Analysis (Insider Threat)

An approach, adapted from business and medical fields by Eric Shaw and Laura Sellers, used to identify factors and patterns that lead to hostile insider acts, providing a framework for understanding insider risk.

Personal Predispositions

The first element of the critical pathway; personal characteristics that predispose individuals toward becoming an insider risk, such as medical/psychiatric conditions, previous rule violations, or decision-making deficits.

Stressors

The second element of the critical pathway; events that result in changes in personal, social, or professional responsibilities requiring effort and energy to adjust, which can heighten risk for predisposed individuals.

Concerning Behaviors

The third element of the critical pathway; problematic behaviors exhibited by inside offenders prior to acting directly against their organization, which can be interpersonal, financial, or mental health-related.

Problematic Organizational Responses

The last element of the critical pathway; organizational behavior in response to at-risk employees, including inaction, inattention, inadequate investigation, or other actions that escalate risk.

Hostile or Destructive Acts

The culmination of the critical pathway, typically involving planning and preparation such as surveillance, acquisition of resources, attempts at unauthorized access, and deception.

Shared Responsibility (Insider Threat)

The principle that insider threat prevention and mitigation should be a collaborative effort involving everyone within an organization, not solely the domain of highly-specialized experts.