Ain't Misbehaving?
Your co-worker is going through a contentious divorce. He looks haggard and worn out. He complains of too little sleep. He gets frequent phone calls at work from his estranged wife and he mentions that he feels he's about to snap. This should be reported. (True/False)
True. Reporting this to Security will allow them to discuss with HR so he can be offered company sponsored support programs to assist, before it becomes a crisis.
You've always known Tad to live a modest lifestyle. Before today's business meeting, Tad shows you photos of his Carribean vacation on a small yacht that he states he just purchased. You recall he also just traded his 2009 pickup truck for a brand-new Cadillac Escalade about a month ago, paying cash after the trade-in. He offers to take you and the entire team out to Fleming's Prime Steakhouse tonight for dinner. This is reportable. (True/False)
True. Tad's unexplained sudden affluence is an Insider Threat indicator. The key is the fact that you've known him to previously live modestly, and the combination of large purchases. Just making a large purchase is not necessarily an indicator - the whole-person concept comes into play. You should report this to Security, and it can be addressed, to see if the sudden wealth was self-reported, if financial counseling is needed, or if other behaviors and actions suggest and Insider Threat.
You are going on vacation to Italy for a week. You must report your foreign travel at least 10 days prior to travelling. (True/False)
True. HII MT requires submission of Foreign Travel in the Foreign Travel Portal at least 10 days in advance for manager approval and processing. (At absolute minimum, prior to travel.)
See Command Media Policies: CO H700 and MTO-F401
This is the term used when an employee maliciously gains unauthorized access to a network, information system, or application.
Hacking
A type of malicious software designed to block access to a computer system until a sum of money is paid.
Ransomware
You notice what you suspect looks to be a gun holster under a coworker's jacket. You report this. (True/False)
True. Weapons are strictly prohibited on company property and possession of a weapon in the workplace, even if just suspected, should be immediately reported.
Command Media Policy:
This is the act of stealing trade secrets or other sensitive financial, business, scientific, or technical information, typically with intent to economically benefit a foreign government entity or competitor business.
Economic Espionage
Marcy was pulled over for doing 47 mph in a 35 zone. She also was cited for having a headlight out and received a ticket for both violations by the police. This needs to be reported. (True/False)
False. According to SEAD-3 guidelines, only arrests need to be reported.
The process of taking plain text and scrambling it into an unreadable format.
Encryption
Your co-worker is known to tell off-color jokes about a variety of ethnic groups. These jokes are not conducive to a positive work atmosphere. Several of your colleagues have shared with you how offensive the jokes are. This is an insider threat indicator. (True/False)
False. While the co-worker's actions are clearly troublesome and offensive, this isn't an insider threat behavioral indicator, but rather something that should be brought to HR. That said, if cruelty or violence is implied in such jokes, ideological grievances can later manifest into hostile actions, which should 100% be reported.
At lunch one day, Andrew laments that he thinks his car is going to be repossessed soon, and that his wife is angry about his abundant losses on the DraftKings Sportsbook app. He says he's positive he can win that money back. This is an Insider Threat indicator. (True/False)
True. While it isn't problematic to gamble responsibly, Andrew is both gambling outside of his means, and his continued intent in online sports betting is indicative of a possible gambling addiction. This should be reported to security so they can work with HR to offer potential programs to address the issue.
This type of spying involves stealing information for a foreign government or organization, often by means of Human Intelligence (HUMINT), technical surveillance, and cyber activity, for the purpose of strategic advantage or planned malicious activity.
International Espionage
Jon got into a fist fight after someone insulted him at a party last night and both he and the other individual were arrested, but released after posting bond. He should report this. (True/False)
True. Per SEAD-3 Guidelines, arrests must be reported to your FSO.
Fraudulent text messages purporting to be from reputable companies in order to trick individuals into revealing personal information.
Smishing
An active shooter has been reported in the building. You should:
A. Run if you safely can; B. Hide in an inner space, lock the door, shut off lights, stay low; C. Fight for your life as a last resort; D. All of the above. (Multiple Choice)
D. Run, Hide, Fight. for more information see FBI.gov's Active Shooter Safety Resources.
Tricia has decided that, due to its state legalization, she is going to invest her money into a local cannabis start up company. She does not smoke, nor does she partake in CBD edibles, drinks, nor topical CBD products. This is allowable as a clearance holder. (True/False)
False. Knowingly investing in any cannabis business is strictly prohibited for security clearance holders. Cannabis is still against Federal law, despite its legalization in several states.
This is the term for violent, criminal acts committed by individuals and/or groups to further ideological goals stemming from domestic influences, such as those of a political, religious, social, racial, or environmental nature.
Domestic Terrorism
Harmful computer programs such as viruses, worms, and trojans used by hackers to gain access to your computer and cause destruction.
Malware
Your co-worker recently won an award for outstanding performance. When required to work on teams, he insists on doing his work alone. He has recently started posting videos on his social media creating improvised explosive devices (IEDs) and can be seen gleefully detonating his "creations." This should be reported. (True/False)
True. Your co-worker may be exhibiting anti-social behavior. Coupled with a fascination with explosives, this could quickly turn into targeted violence. The key here is looking at the combination of isolationism/anti-social behavior, and development of weapons. It will be investigated and if it turns out to be nothing concerning, it will be handled appropriately.
David is excited because he recently discovered a great new UK-based cryptocurrency company. He and his wife decided to invest $9,500 US dollars in the new cryptocurrency. This is reportable. (True/False)
True. Per SEAD-3 guidelines, "ownership of foreign state-backed, hosted, or managed cryptocurrency and ownership of cryptocurrency wallets hosted by foreign exchanges" must be reported. No reporting is needed if an individual is not aware that any such holdings are backed, hosted or managed by a foreign exchange, or if holdings are part of a widely diversified fund (i.e. index funds), unless it is entirely foreign based.
This infamous spy was a CIA case officer who was arrested and charged with spying on behalf of Russia, and compromised at least 100 U.S. intelligence operations as well as the execution of at least ten U.S. sources.
Aldrich Ames
Fraudulent phone calls or voice messages purporting to be from reputable companies in order to trick individuals into revealing personnel information.
Vishing