Insider Threat SIG

Mission

Insider threats — whether malicious, negligent, or inadvertent — pose a significant challenge to organizations globally. This SIG aims to create a dedicated forum for FIRST members to share expertise, develop best practices, and collaborate on improving detection, response, and mitigation of insider threat incidents across diverse industries and environments.

Goals & Deliverables

In the first year, the Insider Threat SIG will:

Facilitate knowledge sharing through regular meetings, workshops, and case studies.
Develop a reference playbook for responding to insider threats.
Build a repository of detection techniques, response frameworks, and investigative tools.
Foster collaboration on open-source initiatives and research related to insider risk management.

A longer-term goal is to contribute guidance for global standards and frameworks addressing insider threats.

Chairs

Vishal Thakur (Atlassian)

The SIG Coordinator will assist with a broader call for participants upon approval.

Mailing list

Any FIRST member may join, others are welcome as well, requests must be approved by the SIG chairs.

insider-threat-sig@first.org (subscribers only; please complete the Request to Join form below)

Request to Join