Vulnerabilities / Threats

11/2/2018
02:30 PM
50%
50%

NITTF Releases New Model for Insider Threat Program

The Insider Threat Program Maturity Framework is intended to help government agencies strengthen their programs.

The National Insider Threat Task Force (NITTF), an initiative co-directed by the FBI and the National Counterintelligence Security Center, today issued its "Insider Threat Program Maturity Framework" to improve on government agencies' existing insider threat programs.

In 2012, the White House released the "National Insider Threat Policy and Minimum Standards for Executive Branch Insider Threat Programs" to provide executive agencies with minimum standards for insider threat programs. The new framework takes these standards a step further by identifying key parts agencies can enhance to better detect and mitigate risk.

Officials developed the framework in fall 2017 by collecting ideas from the US government's insider threat community. Feedback helped them build a model framework based on the capability maturity model process used in private industry. Earlier this year, representatives from the intelligence community, Department of Defense, and federal partner insider threat programs evaluated the new framework to ensure it was ready for rollout.

Read more details here.

 

Black Hat Europe returns to London Dec 3-6 2018  with hands-on technical Trainings, cutting-edge Briefings, Arsenal open-source tool demonstrations, top-tier security solutions and service providers in the Business Hall. Click for information on the conference and to register.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
11/6/2018 | 10:17:28 AM
6 Pillars
There are six pillars to this new initiative. Three of which are pretty common security best practices and the other are a bit more advanced and I would posit that not many organizations are currently at that end of the maturity model to date.
Russia Hacked Clinton's Computers Five Hours After Trump's Call
Robert Lemos, Technology Journalist/Data Researcher,  4/19/2019
Why We Need a 'Cleaner Internet'
Darren Anstee, Chief Technology Officer at Arbor Networks,  4/19/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-11515
PUBLISHED: 2019-04-25
core/classes/db_backup.php in Gila CMS 1.10.1 allows admin/db_backup?download= absolute path traversal to read arbitrary files.
CVE-2019-11511
PUBLISHED: 2019-04-25
Zoho ManageEngine ADSelfService Plus before build 5708 has XSS via the mobile app API.
CVE-2019-11513
PUBLISHED: 2019-04-25
The File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in a Rename action.
CVE-2019-11514
PUBLISHED: 2019-04-25
User/Command/ConfirmEmailHandler.php in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens.
CVE-2019-11506
PUBLISHED: 2019-04-24
In GraphicsMagick from version 1.3.30 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WriteMATLABImage of coders/mat.c, which allows an attacker to cause a denial of service or possibly have unspecified other impact via a crafted image file. This is related to Expo...