Johan is a janitor at a DOD facility. He does not have national security eligibility determination. When he is working near the building entrances, he often opens the door for anyone entering. Does this pose an insider threat as defined by the National Insider Threat Task Force (NITTF)? Why or why not?
(Select the best answer)
Yes, the incident does meet the definition because Johan’s lack of a national security eligibility determination makes him untrustworthy and a potential security risk.
Yes, the incident does meet the definition because Johan is using his authorized access and may cause damage by violating security procedures.
No, the incident does not meet the definition because Johan does not work directly with classified information.
No, the incident does not meet the definition because Johan does not have national security eligibility determination.
The correct answer and explanation is:
The correct answer is:
Yes, the incident does meet the definition because Johan is using his authorized access and may cause damage by violating security procedures.
Here’s why:
The National Insider Threat Task Force (NITTF) defines insider threats as individuals who misuse their authorized access to a facility, system, or information for malicious purposes. While Johan may not work directly with classified information, his role as a janitor with access to a sensitive facility means he has the opportunity to influence the security environment.
By allowing unauthorized individuals to enter the building, Johan could be inadvertently facilitating a security breach. Even though he may not have malicious intent, his actions can still compromise the integrity of the facility’s security procedures, especially if proper access controls and protocols are not followed. Thus, his behavior is considered a potential insider threat because it violates security measures that are designed to prevent unauthorized access.