F.E. WARREN AIR FORCE BASE, Wyo. -- Insider threats, whether driven by negligence, malice or stress, pose significant risks to national security. Our ability to deter, detect and mitigate these threats is more vital than ever.
As we recognize National Insider Threat Awareness Month this September, it’s important for all military personnel, civilian employees and contractors within the Department of Defense to focus on our shared responsibility to protect our nation from the inside out.
Understanding the Insider Threat
The 2017 National Defense Authorization Act defines an insider threat as any risk posed by a person with authorized access to DoD information, facilities, networks, or personnel who, knowingly or unknowingly, commits an act that could harm national security. This threat can manifest as unauthorized disclosure of information, espionage, sabotage, or even acts of violence.
The timeline of insider threat incidents, including the tragic events at the Washington Navy Yard in 2013 and the unauthorized disclosures by Edward Snowden and Chelsea Manning, underscores the severe consequences of failing to address insider threats promptly. Each event highlights different facets of the insider threat spectrum, from violent acts to breaches of information security, all of which could have been mitigated with better preventive measures.
Deter: Building a Resilient Organizational Culture
Deterrence begins with fostering a strong, resilient organizational culture. Stress, perceptions of injustice and poor communication are common challenges that can fuel insider threats. For instance, employees who perceive their workplace as unjust are 4.6 times more likely to engage in insider threat behaviors than those who feel their organization is fair and just (Defense Counterintelligence and Security Agency, 2024).
To counter these risks, leaders at every level must take proactive steps to promote fairness, effective communication and stress management. Encouraging open dialogue, recognizing employee contributions and ensuring that everyone understands the resources available to them, can reduce the likelihood of disgruntlement and the potential for insider threats.
Detect: Recognizing Early Warning Signs
Early detection is important to preventing insider threats from escalating.
Dr. Eric Shaw, clinical psychologist and consultant to federal agencies on insider crime, originated the “critical pathway” model for understanding insider attacks. The components of the model are personal predispositions, stressors, concerning behaviors, organizational response and insider attack. This model provides a framework for identifying and assessing potential risks before they lead to hostile acts and emphasizes the importance of knowing a person’s baseline behavior and recognizing deviations that may indicate stress, financial problems, interpersonal conflicts or other concerning behaviors.
Changes in performance, suspicious travel or unexplained absences could signal underlying issues that need immediate attention. By maintaining vigilance and promptly addressing these signs through proper channels, we can intervene before a threat materializes.
Mitigate: Taking Action to Prevent Escalation
When a potential insider threat is identified, swift and decisive action is necessary to mitigate the risk. This may involve anything from offering support and counseling to removing access to sensitive information or even pursuing legal action. The goal is to apply appropriate mitigators that either prevent an individual from starting down the path of becoming a threat or help them get off that path before harm occurs.
Reporting plays a crucial role in mitigation. Whether the action is intentional or inadvertent, physical or virtual, performed by yourself or someone else, it’s essential to report any suspicious behavior or security concerns through the appropriate channels, such as your supervisor, commander or to the Air Force Eagle Eyes program. This ensures that all incidents are thoroughly investigated and that necessary steps are taken to protect our personnel and assets.
As we observe National Insider Threat Awareness Month, let’s reaffirm our commitment to protecting our nation by reinforcing the principles of deter, detect and mitigate. Every member of the DoD has a role to play in this effort. By cultivating a culture of vigilance, we can prevent insider threats before they harm our mission and our people.
The strength of our defense comes from within. Let’s work together to ensure that no threat, internal or external, compromises the safety and security of our nation.