1. Insider Threat San Diego, CA 2012 This document is intended solely for the use and information of the client to whom it is addressed. San Diego Industrial Counterintelligence Working Group

2.  What is Insider Threat?  Signifiers of Insider Threat  Current Examples (Case Studies)  Industrial Best Practices  Reporting Requirements Table Of Contents San Diego Industrial Counterintelligence Working Group

3. Insider Threat Defined San Diego Industrial Counterintelligence Working Group The threat of data loss from a legitimate employee. These threats are often harder to detect and are more likely to cause greater damage than an external attack.

4. Indicators San Diego Industrial Counterintelligence Working Group Personal Organizational Behavioral

5.  Dongfan “Greg” Chung  Yang Chunlai  Pedro Mascheroni Current Examples (Case Studies) San Diego Industrial Counterintelligence Working Group

6. Industrial Best Practices San Diego Industrial Counterintelligence Working Group Non-Disclosure Agreements Frequent education and reminders to the ENTIRE employee base

7. Industrial Best Practices San Diego Industrial Counterintelligence Working Group Mark your sensitive material accordingly Perform regular auditing

8. Reporting Requirements San Diego Industrial Counterintelligence Working Group Question: “What’s the difference between 1-301 and 1-302?” Answer: “Probable or possible VS. Rumor or Innuendo”

9. Questions San Diego Industrial Counterintelligence Working Group