Abstract for: Modeling the Employee Life Cycle to Address the Insider Threat

Within an organization, the employee population is the source of potential malevolent insiders. To investigate the evolution of the insider within an organization, we are developing a model of the employee life cycle. The employee life cycle model is designed to define and analyze interactions of the employee population with insider security protection strategies. The model was exercised for an example scenario that focused on human resources and personnel security activities, specifically, pre-hiring screening and security clearance processes. This modeling effort provides a framework to understand important interactions, interdependencies, and gaps in insider protection strategies. This work is part of a larger effort to develop the basis for an integrated systems-based process for designing and evaluating effective insider security systems.