Insider Threat
Insider threat refers to the risk posed by individuals within an organisation who have access to its sensitive data, systems, or facilities. These individuals could be employees, contractors, business associates, or former employees who misuse their access, either intentionally or unintentionally, to harm the organisation.
MITRE Australia leverages insider threat research and solutions programs from across Australia and the United States to develop rigorous and data-driven frameworks, indicators, methodologies, mitigations, operational successes, and thought leadership to reduce the risk from harmful acts undertaken by trusted employees inside an organisation.
MITRE Australia works with government, industry, and academia to build, grow and mature insider threat programs across the country. Some of our capabilities include:
- Detection and Indicators: We develop and hone a set of research methodologies to identify and evaluate potential risk indicators of insider risk and threat. We offer objective feedback on the relative cost-benefit of solutions for insider threat programs, and a thorough evaluation and comparison of third-party tools.
- Deterrence and Mitigation: We are experts in producing interventions that aim to deter or mitigate insider risk within government agencies and critical infrastructure industry. We leverage cutting-edge behavioural and cyber sciences to create meaningful behaviour change to protect people, information, and assets.
- Program Design and Development: We review, evaluate, and make actionable recommendations for paths forward for sponsors looking to build, grow, or mature state-of-the-art insider threat programs. This includes core decision points they will reach, and how to overcome key challenges and misconceptions.
- Screening and Vetting: We are conducting behavioural analysis of a large quantity of existing derogatory background investigation data to identify data-driven patterns in critical behavioural flags, develop validated novel indicators, and identify most appropriate data sources for risk decisions.
MITRE Australia has supported insider threat research for the government and for large Australian critical infrastructure organisations.