The Insider Threat

Eleanor E. Thompson, PhD, is known as an organizational change agent, and in 2016 was awarded the U.S. Coast Guard Commandant’s Superior Achievement Award for cybersecurity innovation. After conducting a groundbreaking sociological study on an information technology problem—Insider Threat—Dr. Thompson applied her research to transform the U.S. Coast Guard toward a vision for operating in the cyber domain. Dr. Thompson has a 20-plus year career history with the U.S. Coast Guard and has worked at the senior-most levels as a policy and operations advisor, including on the commandant’s staff (Tom Collins and Thad Allen), as well as advising those who would become commandant (Robert Papp). During a historical post–9/11 effort by the government to both create and improve homeland security, Dr. Thompson served as a U.S. delegate to a specialized forum of the United Nations—the International Maritime Organization—located in London, UK, for the assembly, council (lead for Coast Guard), and technical cooperation committee (lead for Coast Guard). Notable achievements included furthering the adoption and implementation of the International Ship and Port Facility Security (ISPS) Code, which came into force in 2004, along with the U.S. implementation of ISPS as the Maritime Transportation Security Act of 2002/2004 (MTSA), first enacted by the 107th Congress to address port and waterway security and signed by President George W. Bush in November 2002. Her writings were incorporated into presidential documents including the US-EU Declaration on Combatting Terrorism (June 2004). Dr. Thompson served as a member of the transition team to stand up U.S. Department of Homeland Security and participated in subsequent quadrennial Homeland Security reviews, as well as development of the International Port Security Program. Dr. Thompson has since supported numerous public–private partnership forums for the U.S. Coast Guard, for the deputy commandant for operations, both domestically and internationally, furthering U.S. strategic objectives through negotiations, and promoting concepts such as homeland security; maritime domain awareness; maritime security; awareness of the U.S. as an Arctic nation; critical infrastructure protection; and cybersecurity. Her writings have been directly incorporated or adopted by two U.S. presidents, George W. Bush and President Barack Obama; three secretaries of the Department of Homeland Security (DHS), including Tom Ridge, Michael Chertoff, and Janet Napolitano; four U.S. Coast Guard commandants, including those previously mentioned, and Paul Zukunft; two U.S. secretaries of state, including Colin Powell and Condoleezza Rice; two Transportation Security Administration (TSA) administrators, including Kip Hawley and John Pistole, and numerous other senior executives and flag officers, two who have gone on to lead the TSA (Peter Neffenger and David Pekoske). Dr. Thompson’s writings have focused on commitment to counterterrorism; developing and establishing the U.S. Coast Guard Cyber Command; promoting maritime security response operations post–9/11; developing strategy including cyber strategy, Arctic strategy, and Western Hemisphere strategy; as well as other U.S. Coast Guard and TSA mission and support topics, such as human capital strategy. Dr. Thompson has extensive experience with the development of national plans including the National Infrastructure Protection Plan (NIPP), the Transportation System Sector-Specific Plan (TS SSP), and various Presidential Policy Decision Directives relating to critical infrastructure and resilience (such as HSPD-7/PPD-21, PPD-8, and EO 13636). She has experience in national-level pandemic response (e.g., H1N1) and reducing risk from all hazards, natural and man-made—with a focus on physical, cyber, and human risk elements. Early in her career, she supported the Coast Guard Atlantic area and district commanders, and specifically as an advisor to the Atlantic area chief of operations, and Fifth District Operations chief as an operations analyst, where she managed Coast Guard Operation Sail 2000 participation/planning/security and helped to develop the initial concept of the deployable operations group among other operations. She is also a graduate of the U.S. Coast Guard Officer Candidate School, Yorktown, Virginia, and last class 3-98 that turned out the lights. She has served onboard an operational medium endurance cutter as the communications officer, intercepting go-fasts and conducting law enforcement operations on the Spanish Main. Dr. Thompson holds an associate degree in applied criminal justice; a BS in sociology; a master’s degree in public administration (justice administration), all from Columbus State University, Georgia. She also holds a master’s degree in human resource management from Troy State University, Alabama, and a PhD in public policy and administration (information technology security and management) from Walden University, Minnesota. She has been an associate faculty member for over a decade for the University of Phoenix—Online and Northern Virginia Campus—where she is also a subject matter expert for curriculum development for both criminal justice and security in critical infrastructure protection and cyberspace, as well as for network security in information systems and technology. Originally from Ottawa, Ontario, Canada, Dr. Thompson now calls Virginia home. She remains dedicated to the missions of the U.S. Coast Guard and continues to support the chief information officer and chief information security officer as a civil servant in Washington, DC.

1. Introduction. 2. Insider Cybersecurity Threats to Organizations. 3. Organizational Risk Factors for Unintended Insider Threat. 4. How Insider Threat Factors Relate to Vulnerability and Consequence. 5. Managerial and Information Technology Specialist Approaches to Mitigating Risk and Increasing Organizational Resilience. 6. Building Organizational Resilience: A Final Reflection.