Vulnerabilities / Threats

11/2/2018
02:30 PM
50%
50%

NITTF Releases New Model for Insider Threat Program

The Insider Threat Program Maturity Framework is intended to help government agencies strengthen their programs.

The National Insider Threat Task Force (NITTF), an initiative co-directed by the FBI and the National Counterintelligence Security Center, today issued its "Insider Threat Program Maturity Framework" to improve on government agencies' existing insider threat programs.

In 2012, the White House released the "National Insider Threat Policy and Minimum Standards for Executive Branch Insider Threat Programs" to provide executive agencies with minimum standards for insider threat programs. The new framework takes these standards a step further by identifying key parts agencies can enhance to better detect and mitigate risk.

Officials developed the framework in fall 2017 by collecting ideas from the US government's insider threat community. Feedback helped them build a model framework based on the capability maturity model process used in private industry. Earlier this year, representatives from the intelligence community, Department of Defense, and federal partner insider threat programs evaluated the new framework to ensure it was ready for rollout.

Read more details here.

 

Black Hat Europe returns to London Dec 3-6 2018  with hands-on technical Trainings, cutting-edge Briefings, Arsenal open-source tool demonstrations, top-tier security solutions and service providers in the Business Hall. Click for information on the conference and to register.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
11/6/2018 | 10:17:28 AM
6 Pillars
There are six pillars to this new initiative. Three of which are pretty common security best practices and the other are a bit more advanced and I would posit that not many organizations are currently at that end of the maturity model to date.
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
The Year in Security 2018
This Dark Reading Tech Digest explores the biggest news stories of 2018 that shaped the cybersecurity landscape.
Flash Poll
How Enterprises Are Attacking the Cybersecurity Problem
How Enterprises Are Attacking the Cybersecurity Problem
Data breach fears and the need to comply with regulations such as GDPR are two major drivers increased spending on security products and technologies. But other factors are contributing to the trend as well. Find out more about how enterprises are attacking the cybersecurity problem by reading our report today.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-6691
PUBLISHED: 2019-01-23
phpwind 9.0.2.170426 UTF8 allows SQL Injection via the admin.php?m=backup&c=backup&a=doback tabledb[] parameter, related to the "--backup database" option.
CVE-2018-19019
PUBLISHED: 2019-01-22
A type confusion vulnerability exists when processing project files in CX-Supervisor (Versions 3.42 and prior). An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
CVE-2019-6260
PUBLISHED: 2019-01-22
The ASPEED ast2400 and ast2500 Baseband Management Controller (BMC) hardware and firmware implement Advanced High-performance Bus (AHB) bridges, which allow arbitrary read and write access to the BMC's physical address space from the host (or from the network in unusual cases where the BMC console u...
CVE-2018-19011
PUBLISHED: 2019-01-22
CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could exploit this to execute code under the privileges of the application.
CVE-2018-19013
PUBLISHED: 2019-01-22
An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file.