Brief: How To Meet November's Deadline And Build A Valuable Insider Threat Program

US Executive Order 13587 set the requirements for US government agencies to create an insider threat program to protect classified information. The US Department of Defense published Change 2 to the National Industrial Security Operating Manual (NISPOM), which requires government contractors to establish an insider threat program by November 30, 2016. In this brief, we lay out the three critical elements that security and risk leaders at affected organizations will need in order to establish an insider threat program that is compliant with NISPOM Change 2.