How to recognize insider threat warning signs
PURPOSE
Insider threat awareness helps protect people, systems, and information. Concerns should be handled carefully and respectfully.
POSSIBLE WARNING SIGNS
Unusual access requests, attempts to bypass controls, unexplained data downloads, sharing credentials, accessing unrelated information, or discussing ways to misuse systems.
DO NOT INVESTIGATE ALONE
Report concerns through approved channels instead of confronting someone or collecting evidence yourself.
BE FAIR
Unusual behavior can have innocent explanations. Report facts, not rumors.
BEST PRACTICE
Protecting the organization includes protecting people from careless accusations.