1. Insider Threat San Diego, CA 2012 This document is intended solely for the use and information of the client to whom it is addressed. San Diego Industrial Counterintelligence Working Group

2. Table Of Contents San Diego Industrial Counterintelligence Working Group What is Insider Threat? Signifiers of Insider Threat Current Examples (Case Studies) Industrial Best Practices Reporting Requirements

3. InsiderThreat Defined The threat of data loss from a legitimate employee. These threats are often harder to detect and are more likely to cause greater damage than an external attack. San Diego Industrial Counterintelligence Working Group

4. Indicators Organizational Personal San Diego Industrial Counterintelligence Working Group Behavioral

5. Current Examples (Case Studies) San Diego Industrial Counterintelligence Working Group Dongfan “Greg” Chung Yang Chunlai Pedro Mascheroni

6. Industrial Best Practices Frequent education and reminders to the ENTIRE employee base San Diego Industrial Counterintelligence Working Group Non-Disclosure Agreements

7. Industrial Best Practices Mark your sensitive material accordingly Perform regular auditing San Diego Industrial Counterintelligence Working Group

8. Reporting Requirements Question: “What’s the difference between 1-301 and 1-302?” Answer: “Probable or possible VS. Rumor or Innuendo” San Diego Industrial Counterintelligence Working Group

9. Questions San Diego Industrial Counterintelligence Working Group