{"id":19372,"date":"2016-02-15T22:07:01","date_gmt":"2016-02-15T22:07:01","guid":{"rendered":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/"},"modified":"2026-08-08T04:48:59","modified_gmt":"2026-08-08T04:48:59","slug":"where-do-you-start-when-building-an-insider-threat-program","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/","title":{"rendered":"Where do you start when building an insider threat program?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Over the years I&#8217;ve helped many organizations build and improve insider threat programs. Some companies employ the right mix of technology, process\u00a0and awareness, while others probably still have a lot of work to do. One question that often comes up when I first talk with an organization is &#8220;Where do we start?&#8221;<br\/><br\/>My answer is, very simply, &#8220;At the beginning.&#8221;<br\/><br\/>The answer may be simple but it certainly isn&#8217;t easy. There&#8217;s a reason that insider threats are such a huge source of concern today: Insiders are responsible for a significant proportion of attacks on organizational data. For example, IBM&#8217;s <a href=\"http:\/\/www-01.ibm.com\/common\/ssi\/cgi-bin\/ssialias?subtype=ST&amp;infotype=SA&amp;htmlfid=SEJ03278USEN&amp;attachment=SEJ03278USEN.PDF&amp;ce=ISM0484&amp;ct=SWG&amp;cmp=IBMSocial&amp;cm=h&amp;cr=Security&amp;ccy=US&amp;cm_mc_uid=91170347534814532312294&amp;cm_mc_sid_50200000=1453231229\">2015 Cyber Security Intelligence Index<\/a> pins 55\u00a0percent of all attacks on insiders, a combination of malicious efforts and inadvertent actors.<br\/><br\/>The data that&#8217;s at risk isn&#8217;t shrinking, either. I&#8217;ve seen firsthand just how much information organizations have stored on their systems. With data stored in so many places and accessed by so many people, it&#8217;s understandable that when they start trying to unravel the Gordian knot of protecting all this information, they freeze.<br\/><br\/>Building an insider threat program from nothing takes some time to do it right. Here are a few basic tips to think about when you&#8217;re setting out on that journey.<br\/><br\/><strong>1: Know your data.<\/strong><br\/><br\/>You can&#8217;t protect something you don&#8217;t know anything about. It&#8217;s vitally important to catalog the information your systems contain. Answering questions like &#8220;What server is that data on?&#8221; &#8220;Where is that information physically located?&#8221; and &#8220;Who has access to that application?&#8221; is a much more important step than many organizations realize.<br\/><br\/>A formal data map and access audit are the foundations for a successful insider threat program.<br\/><br\/><strong>2: Set priorities.<\/strong><br\/><br\/>I worked with an organization that was in the process of mapping its data for many reasons, one of which was creating an insider threat program. One of the first days on site with them, I asked &#8220;Have you identified your crown jewels?&#8221;<br\/><br\/>They proudly answered &#8220;Yes, all 80-plus of them.&#8221;<br\/><br\/>I give them credit for trying to prioritize their data, but more than 80 crown jewels? Really? That&#8217;s simply too many priorities to work with. Instead, we recommended that they try to create priorities within those applications by considering which applications or data would cripple the organization if they were compromised and place those specific items at the top. These priorities are what we consider to be their critical value data<em>.<\/em>\u00a0<br\/><br\/>While massive databases of customer data are very important, sometimes very specific documents like strategic plans or company financials would prove more damaging if they fell into the wrong hands. These are also easier to identify and protect than huge sets of data, which can come later on in the process.<br\/><br\/><strong>3: It&#8217;s not just about technology.<\/strong><br\/><br\/>\u00a0<br\/><br\/>Insider threats are not merely a technology problem. They&#8217;re also a risk management problem, as we wrote in our whitepaper, &#8220;A Holistic Approach to Countering Insider Threats.&#8221; An organization needs to set this expectation early and bring it up often during the building and implementation process. You may need to elevate insider threats out of the IT department; to give it the proper attention, it needs to make its way to the C-suite and the boardroom.\u00a0<br\/><br\/>Many &#8220;programs&#8221; are technical implementations, tools that sound good when they are pitched or demonstrated but that fall short when they are installed and start getting used in a real environment. They either don&#8217;t do everything that they claim to do or, more often, they fall short because the right training, procedures, awareness\u00a0and other supporting factors aren&#8217;t put into place.<br\/><br\/>Building an insider threat program takes all of these things to succeed. Of course technology is important. But tools are only one piece of the puzzle. By setting expectations with the organization&#8217;s leadership (not just IT leadership, but all leadership), targeting the most critical value data, and focusing equal attention on the factors surrounding the technology, you can set yourself on the path to creating an effective, functional, and complete insider threat program.<br\/><br\/><em>Keith Lowry is Nuix&#8217;s\u00a0<\/em><em>senior vice president for business threat intelligence and analysis.<\/em>\u00a0<em>He served as chief of staff to the deputy undersecretary of Defense for human intelligence, counterintelligence and security at the Pentagon, and as an information security consultant in the private sector.<\/em><br\/><br\/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Identifying which data is your organization&#8217;s &#8220;crown jewels&#8221; is the first step.<\/p>\n","protected":false},"author":7,"featured_media":37840,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":26,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[15,26],"tags":[],"coauthors":[1056,545],"class_list":["post-19372","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-management","category-opinions"],"acf":{"subheadline":"","legacy_arc_id":"PSYAASRI5NBKROLTGWNLNNINDM","arc_canonical_url":"\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Where do you start when building an insider threat program? - Federal Times<\/title>\n<meta name=\"description\" content=\"Identifying which data is your organization&#039;s &quot;crown jewels&quot; is the first step.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Where do you start when building an insider threat program?\" \/>\n<meta property=\"og:description\" content=\"Identifying which data is your organization&#039;s &quot;crown jewels&quot; is the first step.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/\" \/>\n<meta property=\"og:site_name\" content=\"Federal Times\" \/>\n<meta property=\"article:published_time\" content=\"2016-02-15T22:07:01+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T04:48:59+00:00\" \/>\n<meta name=\"author\" content=\"Keith Lowry, Nuix, Nuix\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Keith Lowry, Nuix, Nuix\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\\\/\\\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"Article\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/opinions\\\/2016\\\/02\\\/15\\\/where-do-you-start-when-building-an-insider-threat-program\\\/#article\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/opinions\\\/2016\\\/02\\\/15\\\/where-do-you-start-when-building-an-insider-threat-program\\\/\"\n\t            },\n\t            \"author\": {\n\t                \"name\": \"migration\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t            },\n\t            \"headline\": \"Where do you start when building an insider threat program?\",\n\t            \"datePublished\": \"2016-02-15T22:07:01+00:00\",\n\t            \"dateModified\": \"2026-08-08T04:48:59+00:00\",\n\t            \"mainEntityOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/opinions\\\/2016\\\/02\\\/15\\\/where-do-you-start-when-building-an-insider-threat-program\\\/\"\n\t            },\n\t            \"wordCount\": 734,\n\t            \"commentCount\": 0,\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/opinions\\\/2016\\\/02\\\/15\\\/where-do-you-start-when-building-an-insider-threat-program\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/keith-lowry.jpg.jpg\",\n\t            \"articleSection\": [\n\t                \"Inside the Agencies\",\n\t                \"Opinion\"\n\t            ],\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"CommentAction\",\n\t                    \"name\": \"Comment\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/opinions\\\/2016\\\/02\\\/15\\\/where-do-you-start-when-building-an-insider-threat-program\\\/#respond\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/opinions\\\/2016\\\/02\\\/15\\\/where-do-you-start-when-building-an-insider-threat-program\\\/\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/opinions\\\/2016\\\/02\\\/15\\\/where-do-you-start-when-building-an-insider-threat-program\\\/\",\n\t            \"name\": \"Where do you start when building an insider threat program? - Federal Times\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#website\"\n\t            },\n\t            \"primaryImageOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/opinions\\\/2016\\\/02\\\/15\\\/where-do-you-start-when-building-an-insider-threat-program\\\/#primaryimage\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/opinions\\\/2016\\\/02\\\/15\\\/where-do-you-start-when-building-an-insider-threat-program\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/keith-lowry.jpg.jpg\",\n\t            \"datePublished\": \"2016-02-15T22:07:01+00:00\",\n\t            \"dateModified\": \"2026-08-08T04:48:59+00:00\",\n\t            \"description\": \"Identifying which data is your organization's \\\"crown jewels\\\" is the first step.\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/opinions\\\/2016\\\/02\\\/15\\\/where-do-you-start-when-building-an-insider-threat-program\\\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/opinions\\\/2016\\\/02\\\/15\\\/where-do-you-start-when-building-an-insider-threat-program\\\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"ImageObject\",\n\t            \"inLanguage\": \"en-US\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/opinions\\\/2016\\\/02\\\/15\\\/where-do-you-start-when-building-an-insider-threat-program\\\/#primaryimage\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/keith-lowry.jpg.jpg\",\n\t            \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/keith-lowry.jpg.jpg\"\n\t        },\n\t        {\n\t            \"@type\": \"BreadcrumbList\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/opinions\\\/2016\\\/02\\\/15\\\/where-do-you-start-when-building-an-insider-threat-program\\\/#breadcrumb\",\n\t            \"itemListElement\": [\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 1,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t                    \"ad_zone\": \"home\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 2,\n\t                    \"name\": \"Opinion\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/opinions\\\/\",\n\t                    \"ad_zone\": \"opinions\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 3,\n\t                    \"name\": \"Where do you start when building an insider threat program?\"\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#website\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t            \"name\": \"Federal Times\",\n\t            \"description\": \"Federal Times\",\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\"\n\t            },\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"Organization\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\",\n\t            \"name\": \"Federal Times\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t            \"logo\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t                \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/federal-logo-white.png\",\n\t                \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/federal-logo-white.png\",\n\t                \"caption\": \"Federal Times\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t            }\n\t        },\n\t        {\n\t            \"@type\": \"Person\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t            \"name\": \"migration\",\n\t            \"image\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t                \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"caption\": \"migration\"\n\t            },\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/author\\\/migration\\\/\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Where do you start when building an insider threat program? - Federal Times","description":"Identifying which data is your organization's \"crown jewels\" is the first step.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Where do you start when building an insider threat program?","og_description":"Identifying which data is your organization's \"crown jewels\" is the first step.","og_url":"https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/","og_site_name":"Federal Times","article_published_time":"2016-02-15T22:07:01+00:00","article_modified_time":"2026-08-08T04:48:59+00:00","author":"Keith Lowry, Nuix, Nuix","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Keith Lowry, Nuix, Nuix","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"Where do you start when building an insider threat program?","datePublished":"2016-02-15T22:07:01+00:00","dateModified":"2026-08-08T04:48:59+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/"},"wordCount":734,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/keith-lowry.jpg.jpg","articleSection":["Inside the Agencies","Opinion"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/","url":"https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/","name":"Where do you start when building an insider threat program? - Federal Times","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/keith-lowry.jpg.jpg","datePublished":"2016-02-15T22:07:01+00:00","dateModified":"2026-08-08T04:48:59+00:00","description":"Identifying which data is your organization's \"crown jewels\" is the first step.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/keith-lowry.jpg.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/keith-lowry.jpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/2016\/02\/15\/where-do-you-start-when-building-an-insider-threat-program\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/federaltimes\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"Opinion","item":"https:\/\/one.sightlinemg.com\/federaltimes\/opinions\/","ad_zone":"opinions"},{"@type":"ListItem","position":3,"name":"Where do you start when building an insider threat program?"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#website","url":"https:\/\/one.sightlinemg.com\/federaltimes\/","name":"Federal Times","description":"Federal Times","publisher":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/federaltimes\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization","name":"Federal Times","url":"https:\/\/one.sightlinemg.com\/federaltimes\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/federal-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/federal-logo-white.png","caption":"Federal Times"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/federaltimes\/author\/migration\/"}]}},"jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Federal Times","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/federaltimes","push-errors":false,"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/keith-lowry.jpg.jpg","_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/19372","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/comments?post=19372"}],"version-history":[{"count":1,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/19372\/revisions"}],"predecessor-version":[{"id":19377,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/19372\/revisions\/19377"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/media?parent=19372"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/categories?post=19372"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/tags?post=19372"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/coauthors?post=19372"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}