National Insider Threat Special Interest Group (NITSIG)

Transcription

1 National Insider Threat Special Interest Group (NITSIG) NITSIG INSIDER THREAT SYMPOSIUM & EXPO (ITSE) MARCH 17, 2016 UNIVERSITY TEXAS SAN ANTONIO SPEAKERS Speaker: Jeff Maille - Deputy Director, Insider Threat Office National Geospatial Agency (NGA) (Keynote Speaker) Establishing An Insider Threat Program Addressing The Critical Questions Up Front! The insider threat problem set is not new. How we approach the problem set is. Historically, insider threat was viewed solely as a counterintelligence issue; this is not the case. An effective insider threat program serves as a bridge, leveraging the capabilities of existing disciplines and programs, capturing the synergy of each to deter, detect, defeat, or otherwise mitigate an insider who uses their authorized access or presence, either wittingly or unwittingly, to do harm to the organization. There are a lot of opinions as to what an insider threat program is - or isn t as well as what the program is designed to accomplish. Addressing some critical questions up front will help you design an effective insider threat program. Mr. Jeffrey L. Maille currently serves as the Deputy Director, Insider Threat Office at the National Geospatial-Intelligence Agency (NGA). Previously, he served as the Insider Threat Program Manager and Chief, NGA s Cyber Counterintelligence Division for seven years, where he managed operations concerning external and internal threats directed at NGA personnel, facilities, and information. Prior to joining NGA, Mr. Maille was assigned as a Department of Defense (DoD) Staff Officer in the Program Management Directorate of the Defense Intelligence Agency s Defense Counterintelligence (CI) and HUMINT Center, formerly the Counterintelligence Field Activity (CIFA), where he served for three years as is the Chief, DoD CI Investigations. He is considered a DoD Subject Matter Expert for CI Investigations and was responsible for all program management activities within his functional area. Mr. Maille also served honorary for twenty three years in the United States Air Force (USAF). He enlisted in 1979 as an Aircrew Life Support Technician and in 1990 cross trained into the Air Force Office of Special Investigations (AFOSI) where he served as a Special Agent. Over the span of his career, he has served at multiple facilities around the world to include tours at Loring Air Force Base, ME; Chanute AFB, IL (Instructor Duty; Certi?ed USAF Master Instructor); Hahn Air Base, Germany; Dover Air Force Base, DE; the Plesidio of Monterey, CA (Japanese Language Student); Yokota Air Base, Japan; Hickam Air Force Base, HI; and Ramstein Air Base, Germany. In addition, he supported special operations in Spain, Italy, Turkey, Israel, Guam, and South Korea. Throughout his career, Mr. Maille has served in a number of functions within the CI and Law Enforcement Community to include the Team Leader for a Counter-Narcotics Joint Drug Enforcement Team, a CI Collector, the Chief of Defensive Operations and Protective Service Operations, the Superintendent of a Base Investigative Branch, and as Superintendent of Regional Operations. He finished his military career as the Superintendent of AFOSI s largest investigative unit, Detachment 515 at Ramstein AB, Germany, retiring from the USAF in 2003.

2 Mr. Maille earned a Bachelor s Degree from Eastern Illinois University and Associate Degrees for Criminal Justice, Survival and Rescue, and Instructor in Technology from the Community College of the Air Force. His awards include the National Defense Service Medal, the Air Force Meritorious Service Medal, the Air Force Commendation Medal, the Air Force Achievement Medal, the Air Force Organizational Excellence Award, and the Air Force Outstanding Unit Award. Mr. Maille and his wife, Petra, have been married for 25 years and live in Fredericksburg, Virginia with their two daughters, Sabrina and Melissa. His oldest daughter, Nicole, lives in Iowa.

3 Supervisory Special Agent DeWayne Sharp - Insider Threat Center Federal Bureau of Investigation (FBI) Insider Threat Program Development Challenges Special Agent Sharp will discuss the 6 Most Common Challenges Insider Threat Program Managers Face When Creating An Insider Threat Program. Special Agent Dewayne Sharp joined the FBI in January 2001 and was assigned to the Chicago Field Office initially to work counterintelligence investigations of intelligence officers from various threat countries. He was subsequently assigned to economic espionage and technology transfer investigations related to the three Department of Energy laboratories in the Chicago area. In January 2009, SA Sharp was promoted to Supervisory Special Agent at FBI headquarters in the Counterintelligence Division managing threat country investigations and operations against foreign intelligence targets. In June 2011, SSA Sharp transferred to the Counterespionage Section where he investigated and managed the investigations of FBI personnel suspected of spying for foreign countries. In June 2014, SSA Sharp became the second member of the FBI s new Insider Threat Center and currently leads a risk management unit. His unit evaluates insider threat risks as they relate to FBI personnel, critical assets and security programs and presents risk mitigation options to Executive Management for decision. Prior to the FBI, SSA Sharp served eight years as a US Army officer in multiple assignments around the world. He is a graduate of the United States Military Academy at West Point and has a Bachelor s degree in Military History with a minor in Computer Science. Speaker: Chad Scott - Boeing Integrated Information Systems (IIS) Lead of Marketing and Strategy For Boeing's Insider Threat Program Boeing Insider Threat Program - Lessons Learned In Insider Threat Program Development Chad Scott is the Lead of Marketing and Strategy for Boeing s Insider Threat Program. In this capacity, he is responsible for developing, communicating and executing a complex business strategy for Boeing s Insider Threat Program. Chad is also the Lead Instructor for Boeing s Insider Threat Analysts Course. Chad joined Boeing through the company s acquisition of Kestrel Enterprises, Inc., for which he served in several leadership and management positions. Chad has led numerous high performing teams focused on providing analytic, technical, and management support to the U.S. Intelligence, DoD and Law Enforcement Communities. He has deployed to the Middle East, Europe and Asia in support of his customers missions and has provided several presentations on topics including Human Tracking, Fundamentals of Analysis, Insider Threat, and Data Management for Counter Terrorism Targeting at various Security and DoD conferences. Prior to joining Kestrel, Chad served in the United States Army for ten years as a Counterintelligence Agent. While on active duty, he supported multiple surveillance and operations mission for national level espionage investigations. He was also a Senior Instructor at The Joint Counterintelligence Training Academy teaching surveillance, source operations and investigations. Chad holds a Master s in Business Administration, a Bachelor of Science in Business Management.

4 Dr. Robert Gallagher Operational Psychologist Senior Partner And Director Of Psychological Consultation And Training Guardian Defense Group NITSIG Board Member / Scientific Director The Psychology of Insider Threat This presentation will review the current state of knowledge regarding the psychological underpinnings and behavioral indicators of insider threat as well as explore the dominant models of the insider threat. Combining the latest research, existing models and real world experience it will detail a new way of thinking about the process by which trusted individuals make the decision to betray to their organizations. This presentation will have a strong emphasis on practical application for insider threat professionals. Dr. Gallagher has extensive experience exploring the human side of espionage and insider threat. As a licensed psychologist, former military intelligence officer and counterintelligence special agent, he has had the opportunity to study and apply his knowledge of human dynamics in an array of settings. He has supported both offensive and defensive intelligence / counterintelligence, SOF and cyber operations. Additionally, he has personally participated in hundreds of strategic and tactical military and intelligence operations on six continents. Prior to joining the private sector Dr. Gallagher served as: o Chief of Behavioral Sciences at the Defense Counterintelligence and HUMINT Center o Founder of the prestigious National Security Psychology Symposium o Chief of Enterprise Screening at the Defense Intelligence Agency o Counterintelligence Psychologist with the Office of Security at the National Security Agency o Special Duty Screener, with the USAF and Air Intelligence Agency Currently, Dr. Gallagher is a Senior Partner and Director of Psychological Consultation and Training with Guardian Defense Group (GDG). GDG is a Service Disabled Veteran Owned Small Business consisting of a unique blend of operational psychologists and former Special Operations operators supporting the counterintelligence, security and behavioral science needs of public and private sector clients.

5 Jim Henderson, Insider Threat Program Training Course Instructor - Risk Mitigation Specialist CEO Of Insider Threat Defense, Inc. Founder / Chairman Of The NITSIG Developing An Insider Threat Program For National Insider Threat Policy / NISPOM Conforming Change 2 And Business -- From A To Z Mr. Henderson has trained a substantial number of U.S. Government Agencies (Federal, DoD, IC), Defense Industrial (DIB) Contractors, Critical Infrastructure Providers, Aviation Security Professionals, large and small businesses on Insider Threat Program Development, Implementation, Management. Mr. Henderson previously worked for the Department of Defense (DoD) Insider Threat Counterintelligence (ITCIG) Group (DoD Contractor), and assisted the DoD ITCIG in establishing a comprehensive and structured DoD Enterprise Insider Threat Program (ITP) Risk Management Framework (RMF). The ITP RMF integrated the security disciplines of Counterintelligence (CI), Security and Information Assurance (IA). The ITP RMF defined the baseline activities to be conducted by DoD Combatant Commands, Services and Agencies to support their ITP's. The National Insider Threat Policy was built off of the ITP RMF. Mr. Henderson has a strong background and provides real world practical approach in the areas of; Information Security, Information Assurance, and Information Systems Security and Cyber Security. Mr. Henderson has 15 years of hands-on experience: In the development, implementation and management of complex Enterprise Cyber Security-Information Systems Security Programs, Information Assurance Risk Management Programs and Counterespionage-Insider Threat Defense Programs for the DoD, National Level Intelligence Centers, U.S Government Agencies, State Governments, large and small businesses. Mr. Henderson has held Senior Level Enterprise Security Program Management Positions As: Cyber Security-Information Assurance Program Management-Training Course Instructor, Senior Information Assurance Manager / Engineer, Cyber Security-Information Systems Security Program Manager, Continuity Of Operations Program Manager, Designated Approving Authority Representative / Certifier Of Information Systems, Computer Forensics Examiner / Analyst, Information Systems Security Manager (ISSM). He has provided strategic planning, operational direction, managed multiple teams, tasks and the financial resources for all projects under his direction, and has reported directly to Agency Directors and Senior Level Business Managers.

6 Shawn Thompson Insider Threat Risk Mitigation Specialist / Lawyer (Corporate Legal Services) Vice President, InfoTeK Corporation NITSIG Board Member "Insider Threat Law- A Lawyer's Guide to Preventing, Detecting, and Mitigating Insider Threats" Over 15 years experience investigating, prosecuting, and managing insider threats. Widely recognized for insider threat expertise and unparalleled scope and breadth of experience. Successfully prosecuted numerous economic espionage cases. Successfully investigated several high profile insider threat cases. Provided expert assessments and briefings on insider threats to the highest levels of government. Pioneer in the field of insider risk management. Deep knowledge of how to properly assess insider risks and create and manage insider threat programs. Experienced trusted broker having advised both government and corporations on how to effectively prevent, detect, and mitigate insider threats. Mr. Thompson has served in numerous high profile positions: o Chairman, Insider Threat Mission Group, Office of the Director of National Intelligence o Insider Threat Program Manager, United States Department of Defense o Special Assistant United States Attorney, United States Attorney's Office o Senior Litigation Attorney, United States Department of Defense o Assistant General Counsel, FBI o Special Assistant United States Attorney, United States Attorney's Office Mr. Shawn Thompson is the Vice President for Enterprise Security Risk Management at InfoTeK Corporation. In that capacity, he manages a robust and innovative risk management practice focusing on insider threats and cyber security. Mr. Thompson has been involved with creating and managing Insider Threat Programs for numerous federal agencies. His work with the National Insider Threat Task Force led to the creation of the National Insider Threat Policy and Minimum Standards for Executive Agencies. Mr. Thompson is a Lawyer and also an active member of the Maryland Bar providing corporate legal services pertaining to employee investigations and security program creation.

7 Contact Information Cindy McClister DC Industries 323 Short Weyel Rd Marion, TX Office: Cell: Jim Henderson / CISSP, CCISO Founder / Chairman Of The National Insider Threat Special Interest Group (NITSIG) CEO Insider Threat Defense, TopSecretProtection.Com, Inc. Counterespionage - Insider Threat Program Training Course Instructor Cyber Threat - Insider Threat Risk Analyst / Risk Mitigation Specialist Phone: / jimhenderson@nationalinsiderthreatsig.org jimhenderson@insiderthreatdefense.com