Insider Threat Program

The US Navy Insider Threat Program mission is to Prevent, Deter, Detect, and Mitigate risks posed by both intentional and unintentional insiders who may jeopardize Navy personnel, sensitive information, or resources.

The Navy Insider Threat Program (InTP) is a centralized initiative established by Executive Order 13587, focused on the early identification and reporting of potential malicious activities. The primary objective is to "left of bang,"; identifying potential malicious activity before an incident occurs. We are not an investigation activity, we are a analytical and reporting activity. Basic concept is to identify potential malicious actors and report them to Commanders or Supervisors before malicious activity takes place.

The Navy Insider Threat Program (InTP) was established in 2013 under OPNAV N2N6. In accordance with Executive Order 13587 (EO), all government agencies that access or manage classified information are mandated to implement an agency-wide insider threat program. This EO was enacted in response to significant breaches of classified information, notably the incidents involving Edward Snowden and Chelsea Manning, and aims to identify and prevent future compromises. The focus of the program has since evolved towards risk management and the prevention of all potential malicious activities. The National Insider Threat initiative is co-managed by the Director of National Intelligence (DNI) and the Department of Justice (DoJ). The program encompasses four major requirements:
  Designate an Agency Senior Official.
  Allocate resources, develop, and train personnel for the Insider Threat Program.
  Monitor user activities on classified information technology networks and systems.
 Establish and manage an insider threat analytics, reporting, and response capability.

The Director of Naval Intelligence (DNI) serves as the Navy’s Executive Agent for Insider Threat, while the Designated Senior Official for Insider Threat is identified as DNS.

The Navy Program of Record provides resources for personnel and material solutions to enhance the Navy’s Counter Insider Threat Capability (CITC).

1. Develop and publish Navy InT policy and doctrine;

2. Resource, manage, deploy and execute Navy User Activity Monitoring (UAM) capability on U.S. Navy classified networks;

3. Resource, manage, execute and operate the Navy InT Analytical Hub (Navy Hub);

4. Resource, manage and execute a Random Polygraph Program for PUs;

5. Resource, manage, develop and execute a Navy InT Strategic Engagement Program;

6. Posture the U.S. Navy to meet National Insider Threat Task Force (NITTF) and DoD standards and requirements.