Sign in

Medium New version US Action required

CISA releases updated Insider Threat Mitigation Guide addressing hybrid work and AI risks

Original title: CISA Releases Updated Insider Threat Mitigation Guide

Published
Source: cisa.gov
Effective
Not stated
Deadline
Not stated
Framework: CISA
BOD 26-04: Prioritizing Security Updates Based on Risk source
in 9 days
CISA Logging Reference Architecture: outcome-driven guidance for FCEB agencies to build Agency Logging Plans under OMB M-26-14

Why it matters

CISA released an updated version of its Insider Threat Mitigation Guide, originally published in 2020, to address evolving threats in the modern operational landscape. The updated guide includes new case studies, statistics, and consolidated sections covering emerging workplace trends such as hybrid and remote work, AI-enabled manipulation and deception, access control, visitor screening, and managing risks during employee separations. Organizations across all security maturity levels can use this guide to assess their insider threat programs and implement recommended mitigation steps to protect key assets, prevent violence, safeguard sensitive data, and reduce losses.

What changed

  • Guide restructured in more streamlined format with consolidated sections and enhanced content delivery designed for continued relevance and better information accessibility
  • New case studies and statistics added to demonstrate insider threat scenarios and provide practical examples for organizations to learn from
  • Expanded coverage of hybrid and remote work arrangements as operational trend affecting insider threat risk assessment and program design
  • New guidance on AI-related risks, including detection and mitigation of AI used to manipulate or deceive employees and systems
  • Enhanced sections on access control, visitor screening protocols, and mitigation strategies for adverse employee separations (offboarding risks)

Who is affected

All organizations regardless of security maturity level. Particularly relevant for security professionals, human resource leaders, and managers responsible for insider threat programs in critical infrastructure sectors and organizations handling sensitive data.

What to do

Organizations should review the updated guide, assess their insider threat program, and implement recommended steps to bolster their threat mitigation program.

Open the official document

AI-assisted summary of the official document; the official text prevails. Not legal advice.

More changes in CISA