Setting the foundations: five principles for a shared approach to insider risk
We encourage you to download this paper to share with others within your organisation, who may benefit from a wider understanding of insider risk.
Readers, whether new to the area or experienced security practitioners, require clear and consistent understanding of foundational concepts relating to insider risk. This 2026 paper outlines five key principles underpinning NPSA advice and guidance, which are:
- Adopting a shared language
- Broadening our understanding of potential insider threats
- Considering the ‘spectrum of intent’: unintentional to intentional
- Detecting and de-escalating signs of insider risk
- The foundations for effective interventions
Insider Risk Mitigation Digital Learning
NPSA has published a series of digital learning modules, all of which are underpinned by NPSA’s ongoing and extensive research into Insider Risk. The modules, all free of charge, will provide you with a solid foundation in this subject area and can act as a springboard to NPSA’s extensive guidance, on helping your business to effectively manage Insider Risk.
Insider Risk for Security Professionals
NPSA has a range of measures available for Security practitioners to mitigate insider risks.
10 Steps to Effective Insider Risk Assessment
NPSA has provided 10 important steps organisations can take to enhance personnel security measures to mitigate insider risk.
Insider Risk: A Guide to Influencing Leaders
This guidance is for security professionals who want to set up an insider risk programme. If you want to get leadership on board with your insider risk programme, we can help. Drawing on extensive NPSA research into executive attitudes and behaviours, we have shared compelling insights to help you explore possible ways forward.
Insider Risk Mitigation Framework
This is NPSA's recommended framework for developing an Insider Threat programme which aims to reduce insider risk. The implementation of this will facilitate an objective review of security posture and allow measures to be updated or deployed in a risk based manner.