Insider Threat

Abstract

The Defense Counterintelligence Security Agency (DCSA) is a strategic asset to the nation and our allies - continuously ensuring a trusted federal, industrial, and affiliated workforce, and enabling industry's delivery of uncompromised capabilities by leveraging advanced technologies and innovation. DCSA uniquely blends critical technology protection, trusted personnel vetting, counterintelligence, and professional education and certification to advance and preserve America's strategic edge. The two programs which fall under Insider Threat are DoD Insider Threat Management and Analysis Center (DITMAC) and National Center for Credibility Assessment (NCCA) DITMAC: Provides an integrated capability to collect and analyze information for insider threat detection and mitigation. The system gathers, integrates, reviews, assesses, and responds to information derived from DoD Insider Threat hubs, Counterintelligence (CI), security, cybersecurity, civilian and military personnel management, workplace violence, anti-terrorism risk management, law enforcement, user activity monitoring on DoD information networks, and other sources as necessary and appropriate to support the identification, mitigation, and countering of insider threats to DoD personnel, assets and information. In FY25, the DITMAC System of Systems (DSoS) requires the capability to support installation-level reporting for the Prevention, Assistance, and Response (PAR) program, User Access Monitoring (UAM), and Behavioral Threat Analysis Capability (BTAC). It also requires adaptation to allow for automated data ingest which will directly support and enhance analytic efforts to focus on areas of increased risk.

Document Details

• Document Type: Project
• Publication Date: Oct 01, 2025
• Source ID: 002_0305327V_7_0400_PB_2025

Tags

Readers

• Cybersecurity.
• Defense Technology Research and Development.

Technology Areas

• Cyber