Potential Indicators
To Report or
Not to Report
Not to Report
Whose Property is
this anyways
this anyways
Am I
compliant
compliant
Identify Me
What Am I
100
Sally Sue voices strong resentment against the organization and the U.S. Defense programs it supports.
What is a potential indicator?
100
Facilities Frank, follows the operational security guidelines for maintaining positive control of his badge or locks it up when he is not wearing it.
What is not reportable to Security?
100
I am using presentations I generated at Mercury to use at my new job.
What is Mercury intellectual property(IP)?
100
I responded to an online contact (who I've never met) and unwittingly shared non-public company information.
What is not compliant
100
I was an American activist and whistleblower who disclosed ~750,000 sensitive documents to WikiLeaks
Who is Chelsea (or Bradley) Manning?
100
This department is responsible for training all employees on Potential Insider Trust issues
What is the Security Department?
200
A coworker is going through a divorce, their spouse is requesting financial support, and the coworker can hardly afford a lawyer, let alone concentrate at work.
What is a potential indicator?
200
Employee travels regularly to a foreign country known for hostile relations with the United States.
What is reportable to security?
200
My resume is posted online and I have updated it to list Mercury as my current employer.
What is not Mercury IP.
200
A colleague forgot their badge and could not enter the side door; I directed them to reception for a visitor’s badge.
What is compliant?
200
I committed the worst mass murder at any U.S. military institution.
Who is Nidal Hasan or Who is the Fort Hood Shooter
200
This program is based on helping employees
What is the [Mercury’s] Insider Trust Program?
300
Edwina the Engineer, Has a new interest in learning a foreign language.
What is not an indicator?
300
Employee protested U.S. involvement with another country and frequently posts anti-U.S. rants on social media.
What is reportable to Security?
300
I saved an old Mercury specification to train my nephew on how to interpret an electrical interface diagram.
What is Mercury IP?
300
I escort my visitors and challenge people in the facility who do not have a badge.
What is compliant
300
Eleven years ago, I committed a heinous act at the Naval Sea Systems Command Headquarters
Who is Aaron Alexis or who is the Washington Navy Yard Shooter
300
The process of taking plain text and scrambling it into an unreadable format called “cipher text”
What is data encryption?
400
Technician Tom forgot his password and he did not write it down. So, he contacted IT to reset his password.
What is not an potential indicator?
400
Tyler in Trade Compliance often works odd hours in the office due to child care.
What is not reportable to Security?
400
I shared a CUI specification on an online forum to win an argument.
What is Mercury IP?
400
I saw an employee drinking alcohol during the company cookout and reported that to their manager before they could drive home.
What is compliant
400
My wife and I are serving time for sharing classified nuclear submarine details.
Who are the Toebbes? Who are the former Navy nuclear engineer and his wife?
400
Deter detect and Mitigate Risk
What is the Insider Trust Program
500
A narcissistic employee with financial issues, issues at home and a drinking problem
What are potential warning signs or potential indicators
500
I found discarded proprietary information in the trash where outside vendors could access
Report to Security
500
A company's process or practice that isn't public information and provides an economic benefit or advantage to the company.
What are trade secrets?
500
I posted classified documents on Discord.
What is not Compliant?
Who is Jack Texeira or who is the Air Force Reservist from Massachusetts
500
I am a former American contractor and a whistleblower who leaked NSA classified documents revealing the existence of global surveillance programs
Who is Edward Snowden?
500
My Manager, the Facility Security Officer, IT or my Human Resources Business Partner
Who should I report something to?