Plan & Build
Passport to Good Security - Security Pre-Screening: pre-screening of employees, contractors and service providers should be included as part of your overall organisation security strategy.
Assess your organisation’s personnel security maturity to build resilience
Assess the three components and reduce your insider risk
People are an organisation's biggest asset, however, recruitment of insiders is becoming a more attractive option for those coveting your assets
Operate & Detect
Advice and recommendations for mitigating this type of insider behaviour
This guidance follows the NPSA protective security risk management (PSRM) approach, and demonstrates a systematic basis for an organisation to develop a proportionate and effective protective security strategy to manage security threats
This table can be completed by organisations to prepare a baseline assessment of their critical assets, adding additional lines if necessary
Discover how to deter, detect and deny those seeking to cause harm
The Think before You Link campaign, on which the TBYL App is based, can help keep you, your colleagues, and the country safe from being targeted by malicious profiles online
Have you ever encountered someone online who was not who they seemed? In the digital age, online social and professional networking sites are enabling us to be more joined up than ever, but also expose us to unforeseen risks
Maintain a productive workforce by developing effective practices that counter the insider threat
Monitoring and assessment is an essential element of good personnel security
Be better equipped to avoid common pitfalls and maintain trust
Response & Review
The Insider Risk programme should be continuously reviewed to measure the effectiveness of any resources used and that it correctly reflects the current threats and vulnerabilities in your organisation.
Appropriate investigation and disciplinary practices are essential in ensuring that disproportionate actions are minimised and adherence to security policies and processes are reinforced.
Passport to Good Security - Hard Measures: ‘hard’ measures require establishing clear procedures to address any failures to adhere to security policy.
Passport to Good Security - Soft Measures: ensure security information is clearly and regularly communicated to staff, contractors and suppliers.
Passport to Good Security - Staff Exit Strategy: employees leaving your organisation may take knowledge about operations, assets and security vulnerabilities with them.
Complete Guidance
Guidance on how to take a security-minded approach to Digital Engineering, Technologies, Projects and Initiatives
A programme of monitoring and review should be in place to enable potential security issues, or personal issues that may impact on an employee's work, to be recognised and dealt with effectively.
Guidance for developing and sustaining effective security behaviours within a Critical National Infrastructure organisation
Employment screening comprises the procedures involved in deciding an individual's suitability to hold employment in a given job role.
Effective education and training is necessary to ensure individuals know what policies, standards, guidelines and procedures are in place to maintain security.
An insider risk programme should integrate effectively with the organisation’s overall communications’ strategy.
How will you embed the desired security behaviours and culture in your organisation?
This webpage outlines five key principles underpinning NPSA advice and guidance
Insider Threat Practitioners and Stakeholders will need to be engaged across business areas to provide specialist insight and ensure a successful implementation of a working Insider Threat Programme.
Understanding what security risks your organisation faces is essential for developing appropriate and proportionate security mitigation measures within the insider threat programme.
Ensuring proportionate policies, standards, guidelines and procedures are in place that are understood and consistently enforced is critical in any insider risk programme.
Positive and visible Board level support for, and engagement with, protective security is vital to demonstrate to staff the value placed on security and the insider threat strategy.
Strong security leadership can ensure you have effective security strategies
A good security culture in your organisation is an essential component of a robust protective security regime and helps to mitigate against insider risks and external people threats.
Physical and technical measures should be defined by operational requirements and should be applied alongside personnel security measures to deliver security in an integrated manner.
This series is for anyone working in the election space, including but not limited to central or local government officials, candidates, campaigners, returning officers and polling station staff
