Insider Threat Program

Definition

An Insider Threat Program is required for cleared contractors under NISPOM/32 CFR Part 117 to detect, deter, and mitigate threats from employees with authorized access to classified information or critical assets. Must include user activity monitoring, training, reporting procedures, and designated senior official oversight.