Senior Company Official. Appoints the ITPSO, signals their support of the ITSP through written memorandum, and provides senior management support for the implementation and execution of the ITSP. Facility Security Officer. Coordinates with the ITPSO at all stages of the implementation and execution of the ITSP. Assists with investigations, reports on any actions or activities which could be indicative of Insider Threat activity, and provides information which affects individual risk categories. Human Resources Department. Provides guidance to the ITPSO regarding relevant changes to labor and employment laws, regulations, and policies which could affect information gathering. Assists with investigations into potential violations or malicious activity. Refers information to the ITSP team that is relevant to risk categories. Works with the ITPSO to develop organizational policies which aid in the reduction of Insider Threat activity. Legal Department. Provides guidance to the ITPSO regarding legal considerations of the ITSP and assists with investigations into potential violations or malicious activity. Information Technologies Department. Assists the ITPSO with necessary access to Company systems as needed to conduct authorized investigations. Reports unauthorized access to Company systems along with detected deviations within the systems. Supports the ITSP by monitoring any information system based analytic detection tools. Works with the ITPSO to develop policies, controls, training tools, and safeguards to mitigate the risk of unauthorized access to Information Systems. Managers & Supervisors. Submit information to the ITPSO that is relevant to risk categories. Reports incidents and violations in regards to Company policies or activities which could be indicative of Insider Threats. Support the ITPSO when conducting investigations into potential Insider Threat activity. Employees & Company Personnel. Submit information to the ITPSO that is relevant to risk categories. Reports incidents and violations in regards to Company policies or activities which could be indicative of Insider Threats. Note that cleared employees have required reporting obligations established under the National Industrial Security Program. DETERRING INSIDER THREAT. Deterrence is most effective when a comprehensive detection program is in place and employees are encouraged to act as stakeholders in the protection of Company resources. The best way to achieve this goal is to ensure that employees receive sufficient training in order to understand the full scope of how Insider Threats affect the government, the Company, their co-workers, and themselves. Employees should be made aware of the ITSP and the steps taken by the ITPSO to prevent the risk of Insider Threats. Initial Insider Threat Awareness Briefings will include a basic overview of what
Senior Company Official. Appoints the ITPSO, signals their support of the ITSP through written memorandum, and provides senior management support for the implementation and execution of the ITSP. Facility Security Officer. Coordinates with the ITPSO at all stages of the implementation and execution of the ITSP. Assists with investigations, reports on any actions or activities which could be indicative of Insider Threat activity, and provides information which affects individual risk categories. Human Resources Department. Provides guidance to the ITPSO regarding relevant changes to labor and employment laws, regulations, and policies which could affect information gathering. Assists with investigations into potential violations or malicious activity. Refers information to the ITSP team that is relevant to risk categories. Works with the ITPSO to develop organizational policies which aid in the reduction of Insider Threat activity. Legal Department. Provides guidance to the ITPSO regarding legal considerations of the ITSP and assists with investigations into potential violations or malicious activity. Information Technologies Department. Assists the ITPSO with necessary access to Company systems as needed to conduct authorized investigations. Reports unauthorized access to Company systems along with detected deviations within the systems. Supports the ITSP by monitoring any information system based analytic detection tools. Works with the ITPSO to develop policies, controls, training tools, and safeguards to mitigate the risk of unauthorized access to Information Systems. Managers & Supervisors. Submit information to the ITPSO that is relevant to risk categories. Reports incidents and violations in regards to Company policies or activities which could be indicative of Insider Threats. Support the ITPSO when conducting investigations into potential Insider Threat activity. Employees & Company Personnel. Submit information to the ITPSO that is relevant to risk categories. Reports incidents and violations in regards to Company policies or activities which could be indicative of Insider Threats. Note that cleared employees have required reporting obligations established under the National Industrial Security Program. DETERRING INSIDER THREAT. Deterrence is most effective when a comprehensive detection program is in place and employees are encouraged to act as stakeholders in the protection of Company resources. The best way to achieve this goal is to ensure that employees receive sufficient training in order to understand the full scope of how Insider Threats affect the government, the Company, their co-workers, and themselves. Employees should be made aware of the ITSP and the steps taken by the ITPSO to prevent the risk of Insider Threats. Initial Insider Threat Awareness Briefings will include a basic overview of what
FISWG_ITSP%20Manual%20-v20160726R.docx