Prevention: the Missing Link for Managing Insider Threat in the Intelligence Community

Prevention: the Missing Link for Managing Insider Threat in the Intelligence Community
Author: David Charney
Publisher:
Total Pages: 40
Release: 2018-12-03
Genre:
ISBN: 9781790718368

This is the third and final paper in the NOIR White Paper trilogy on Insider Threats. The previous white paper proposed an off-ramp exit solution, which does not yet exist, for those who have crossed the line. Quoting Sun Tzu: "Always leave your enemy an exit." Extending the logic, why not off-ramp exits, meaning robust prevention mechanisms, for BEFORE they cross the line? Security breaches and other insider threat events are the endpoints that indicate a failure occurred somewhere along the sequence of links in security chains. These links are the protective measures intended to counter potentially disastrous breaches. Breaches are proof that the links failed.Failed security chains in the Intelligence Community (IC) should be analyzed the same way the National Transportation Safety Board (NTSB) goes about studying aircraft disasters. The NTSB seeks to understand how each link failed in chains that resulted in disasters and whether protective links that should have been built into security chains were simply missing. This new paper asserts that there are two critical missing links in Intelligence Community security chains. These missing links can be described as two types of off-ramp exits: exits for BEFORE someone crosses the line and exits for AFTER someone crosses the line. The absence of these two links in IC security chains weakens effective management of IC insider threat. If both missing links were added to the considerable number of existing and planned detection links--which at present seem to be the only game in town-- a full spectrum solution would come into existence for the comprehensive management of insider threat. This paper is proposes how to achieve this full spectrum solution.

Noir White Papers

Noir White Papers
Author: David Charney
Publisher: Independently Published
Total Pages: 78
Release: 2019-02-04
Genre:
ISBN: 9781795837385

This book contains all three White Papers by Dr. David Charney that provide a full-spectrum solution for managing insider threat: 1) True Psychology of the Insider Spy 2) NOIR: A White Paper Proposing a New Policy for Improving National Security by Fixing the Problem of Insider Spies and 3) Prevention: The Missing Link for Managing Insider Threat in the Intelligence Community. The author of the White Papers, David Charney, M.D., is a psychiatrist who had the unique experience of interviewing former FBI counterintelligence officer Robert Hanssen in jail, weekly, for approximately two hours per visit, for a year. Dr. Charney did the same with two other incarcerated insider spies: Earl Pitts (former FBI Special Agent revealed as a KGB spy), and Brian Regan (former Air Force/NRO). Dr. Charney's interest was to better understand the minds of spies for the sake of strengthening our national security. Over the eighteen years of his work with these cases, Dr. Charney developed a greater understanding of insider spy psychology and formulated new approaches and fresh proposals for better managing the problem of insider spies. Most Insider Threat management initiatives have been technology driven. While clever and useful up to a point, they are subject to the Law of Diminishing Returns and can backfire by creating a negative, distrustful workplace atmosphere. A well-motivated insider can defeat nearly any technology-based system. They will always find a way. By contrast, Dr. Charney's NOIR proposals center on the minds of potential or current insider threats: their psychologies and their inner worlds. The battle must be won there. The second white paper proposed an off-ramp exit solution, which does not yet exist, for those who have crossed the line. Quoting Sun Tzu: "Always leave your enemy an exit." Extending the logic, why not off-ramp exits, meaning robust prevention mechanisms, for BEFORE they cross the line? Security breaches and other insider threat events are the endpoints that indicate a failure occurred somewhere along the sequence of links in security chains. These links are the protective measures intended to counter potentially disastrous breaches. Breaches are proof that the links failed. Failed security chains in the Intelligence Community (IC) should be analyzed the same way the National Transportation Safety Board (NTSB) goes about studying aircraft disasters. The NTSB seeks to understand how each link failed in chains that resulted in disasters and whether protective links that should have been built into security chains were simply missing. The third white paper asserts that there are two critical missing links in Intelligence Community security chains. These missing links can be described as two types of off-ramp exits: exits for BEFORE someone crosses the line and exits for AFTER someone crosses the line. The absence of these two links in IC security chains weakens effective management of IC insider threat. If both missing links were added to the considerable number of existing and planned detection links-which at present seem to be the only game in town- a full spectrum solution would come into existence for the comprehensive management of insider threat. This part of the paper is proposes how to achieve this full spectrum solution. NOIR for USA is a 501(c)3 entity to educate the US Intelligence Community, other government components, including the Congress, the courts, responsible journalists, and the general public, about the NOIR concepts and proposals. Dr. Charney and his colleagues at NOIR For USA would appreciate any comments, criticisms, or additional thoughts you may have about NOIR concepts and proposals: [email protected]

Managing the Insider Threat

Managing the Insider Threat
Author: Nick Catrantzos
Publisher: CRC Press
Total Pages: 357
Release: 2012-05-17
Genre: Business & Economics
ISBN: 1466566566

An adversary who attacks an organization from within can prove fatal to the organization and is generally impervious to conventional defenses. Drawn from the findings of an award-winning thesis, Managing the Insider Threat: No Dark Corners is the first comprehensive resource to use social science research to explain why traditional methods fail aga

Insider Threat

Insider Threat
Author: Michael G. Gelles
Publisher: Butterworth-Heinemann
Total Pages: 254
Release: 2016-05-28
Genre: Business & Economics
ISBN: 0128026227

Insider Threat: Detection, Mitigation, Deterrence and Prevention presents a set of solutions to address the increase in cases of insider threat. This includes espionage, embezzlement, sabotage, fraud, intellectual property theft, and research and development theft from current or former employees. This book outlines a step-by-step path for developing an insider threat program within any organization, focusing on management and employee engagement, as well as ethical, legal, and privacy concerns. In addition, it includes tactics on how to collect, correlate, and visualize potential risk indicators into a seamless system for protecting an organization’s critical assets from malicious, complacent, and ignorant insiders. Insider Threat presents robust mitigation strategies that will interrupt the forward motion of a potential insider who intends to do harm to a company or its employees, as well as an understanding of supply chain risk and cyber security, as they relate to insider threat. Offers an ideal resource for executives and managers who want the latest information available on protecting their organization’s assets from this growing threat Shows how departments across an entire organization can bring disparate, but related, information together to promote the early identification of insider threats Provides an in-depth explanation of mitigating supply chain risk Outlines progressive approaches to cyber security

N O I R

N O I R
Author: David L. Charney
Publisher: Noir for USA, Incorporated
Total Pages: 40
Release: 2014-08-05
Genre: Intelligence service
ISBN: 9780692260852

NOIR is a two-part White Paper, written by David L. Charney, M.D., a psychiatrist who had the unique experience of interviewing former FBI counterintelligence officer Robert Hanssen in jail, weekly, for approximately two hours per visit, for a year. Dr. Charney did the same with two other incarcerated insider spies: Earl Pitts (former FBI Special Agent revealed as a KGB spy), and Brian Regan (former Air Force/NRO). Dr. Charney's interest was to better understand the minds of spies for the sake of strengthening our national security. Over the eighteen years of his work with these cases, Dr. Charney developed a greater understanding of insider spy psychology and formulated new approaches and fresh proposals for better managing the problem of insider spies. Dr. Charney's first paper, "True Psychology of the Insider Spy," Part One of his two-part White Paper on insider spies, was published in late 2010 in the AFIO Intelligencer. This paper can be viewed on the NCIX (National Counterintelligence Executive) website. Most Insider Threat management initiatives have been technology driven. While clever and useful up to a point, they are subject to the Law of Diminishing Returns and can backfire by creating a negative, distrustful workplace atmosphere. A well-motivated insider can defeat nearly any technology-based system. They will always find a way. By contrast, Dr. Charney's NOIR proposals center on the minds of potential or current insider threats: their psychologies and their inner worlds. The battle must be won there. NOIR focuses on "classic" state-sponsored espionage. However, many of its points are applicable for dealing with Snowden-type threats. NOIR for USA is a 501(c)3 entity to educate the US Intelligence Community, other government components, including the Congress, the courts, responsible journalists, and the general public, about the NOIR concepts and proposals. Dr. Charney and his colleagues at NOIR for USA would appreciate any comments, criticisms, or additional thoughts you may have about NOIR concepts and proposals: [email protected]

Managing the Insider Threat

Managing the Insider Threat
Author: Nick Catrantzos
Publisher:
Total Pages: 363
Release: 2016
Genre:
ISBN:

An adversary who attacks an organization from within can prove fatal to the organization and is generally impervious to conventional defenses. Drawn from the findings of an award-winning thesis, Managing the Insider Threat: No Dark Corners is the first comprehensive resource to use social science research to explain why traditional methods fail against these trust betrayers. In this groundbreaking book, author Nick Catrantzos identifies new management, security, and workplace strategies for categorizing and defeating insider threats. The book begins with problem definition and research findings that lead to the "No Dark Corners" strategy for addressing insider threats. With these foundational underpinnings, the book then examines agents of change within the workplace-namely, key players in positions to effectively support or undermine the No Dark Corners strategy, including corporate sentinels and leaders affecting application of this approach. From there, the author goes on to examine key areas where No Dark Corners-style engagement can make a difference in the way an institution counters insider threats-through rethinking background investigations, recognizing deception, and using lawful disruption. Moving progressively from the theoretical to the practical in applying the strategy within an organizational framework, the book looks at implementation challenges and offers a framework for introducing new insider defense insights into an organization. Each chapter offers questions to stimulate discussion and exercises or problems suitable for team projects. This practical resource enables those charged with protecting an organization from internal threats to circumvent these predators before they jeopardize the workplace and sabotage business operations.

The CERT Guide to Insider Threats

The CERT Guide to Insider Threats
Author: Dawn M. Cappelli
Publisher: Addison-Wesley
Total Pages: 431
Release: 2012-01-20
Genre: Computers
ISBN: 013290604X

Since 2001, the CERT® Insider Threat Center at Carnegie Mellon University’s Software Engineering Institute (SEI) has collected and analyzed information about more than seven hundred insider cyber crimes, ranging from national security espionage to theft of trade secrets. The CERT® Guide to Insider Threats describes CERT’s findings in practical terms, offering specific guidance and countermeasures that can be immediately applied by executives, managers, security officers, and operational staff within any private, government, or military organization. The authors systematically address attacks by all types of malicious insiders, including current and former employees, contractors, business partners, outsourcers, and even cloud-computing vendors. They cover all major types of insider cyber crime: IT sabotage, intellectual property theft, and fraud. For each, they present a crime profile describing how the crime tends to evolve over time, as well as motivations, attack methods, organizational issues, and precursor warnings that could have helped the organization prevent the incident or detect it earlier. Beyond identifying crucial patterns of suspicious behavior, the authors present concrete defensive measures for protecting both systems and data. This book also conveys the big picture of the insider threat problem over time: the complex interactions and unintended consequences of existing policies, practices, technology, insider mindsets, and organizational culture. Most important, it offers actionable recommendations for the entire organization, from executive management and board members to IT, data owners, HR, and legal departments. With this book, you will find out how to Identify hidden signs of insider IT sabotage, theft of sensitive information, and fraud Recognize insider threats throughout the software development life cycle Use advanced threat controls to resist attacks by both technical and nontechnical insiders Increase the effectiveness of existing technical security tools by enhancing rules, configurations, and associated business processes Prepare for unusual insider attacks, including attacks linked to organized crime or the Internet underground By implementing this book’s security practices, you will be incorporating protection mechanisms designed to resist the vast majority of malicious insider attacks.

Insider Threats

Insider Threats
Author: Matthew Bunn
Publisher: Cornell University Press
Total Pages: 192
Release: 2017-01-24
Genre: Political Science
ISBN: 1501706497

"This compendium of research on insider threats is essential reading for all personnel with accountabilities for security; it shows graphically the extent and persistence of the threat that all organizations face and against which they must take preventive measures." — Roger Howsley, Executive Director, World Institute for Nuclear Security High-security organizations around the world face devastating threats from insiders—trusted employees with access to sensitive information, facilities, and materials. From Edward Snowden to the Fort Hood shooter to the theft of nuclear materials, the threat from insiders is on the front page and at the top of the policy agenda. Insider Threats offers detailed case studies of insider disasters across a range of different types of institutions, from biological research laboratories, to nuclear power plants, to the U.S. Army. Matthew Bunn and Scott D. Sagan outline cognitive and organizational biases that lead organizations to downplay the insider threat, and they synthesize "worst practices" from these past mistakes, offering lessons that will be valuable for any organization with high security and a lot to lose. Insider threats pose dangers to anyone who handles information that is secret or proprietary, material that is highly valuable or hazardous, people who must be protected, or facilities that might be sabotaged. This is the first book to offer in-depth case studies across a range of industries and contexts, allowing entities such as nuclear facilities and casinos to learn from each other. It also offers an unprecedented analysis of terrorist thinking about using insiders to get fissile material or sabotage nuclear facilities. Contributors: Matthew Bunn, Harvard University; Andreas Hoelstad Dæhli, Oslo; Kathryn M. Glynn, IBM Global Business Services; Thomas Hegghammer, Norwegian Defence Research Establishment, Oslo; Austin Long, Columbia University; Scott D. Sagan, Stanford University; Ronald Schouten, Massachusetts General Hospital and Harvard Medical School; Jessica Stern, Harvard University; Amy B. Zegart, Stanford University

Insider Threats in Cyber Security

Insider Threats in Cyber Security
Author: Christian W. Probst
Publisher: Springer Science & Business Media
Total Pages: 248
Release: 2010-07-28
Genre: Computers
ISBN: 1441971335

Insider Threats in Cyber Security is a cutting edge text presenting IT and non-IT facets of insider threats together. This volume brings together a critical mass of well-established worldwide researchers, and provides a unique multidisciplinary overview. Monica van Huystee, Senior Policy Advisor at MCI, Ontario, Canada comments "The book will be a must read, so of course I’ll need a copy." Insider Threats in Cyber Security covers all aspects of insider threats, from motivation to mitigation. It includes how to monitor insider threats (and what to monitor for), how to mitigate insider threats, and related topics and case studies. Insider Threats in Cyber Security is intended for a professional audience composed of the military, government policy makers and banking; financing companies focusing on the Secure Cyberspace industry. This book is also suitable for advanced-level students and researchers in computer science as a secondary text or reference book.