NIST indicates that potential indicators and possible precursors of insider threat can include behaviors such as inordinate, long-term job dissatisfaction, attempts to gain access to information not required for job performance, unexplained access to financial resources, bullying or sexual harassment of fellow employees, workplace violence, and other serious violations of organizational policies, procedures, directives, rules, or practices. Security awareness training includes how to communicate employee and management concerns regarding potential indicators of insider threat through appropriate organizational channels in accordance with established organizational policies and procedures. (Source)
This paper from Carnegie Mellon discusses potential ways an insider threat program could go wrong. This toolkit contains resources to help you perform your role in the insider threat field. This webpage provided by CISA will help individuals, organizations, and communities create or improve an existing insider threat mitigation program. This guide provides direction for implementing the basic building blocks of an insider threat program. This Framework is designed to help optimize insider threat program capabilities.
This link to CDSE provides insider threat training and awareness. This document provides assessment guidance for Level 1 of the Cybersecurity Maturity Model Certification (CMMC). This document provides assessment guidance for conducting Cybersecurity Maturity Model Certification (CMMC) assessments for Level 2. This course from FEMA provides guidance on how to identify and take action against insider threats. The purpose of this publication is to provide procedures for assessing the CUI requirements in NIST Special Publication 800-171. This course from DNI is intended to help familiarize you with the subject of insider threat and to provide guidance. This course discusses how Insider Threat Awareness is an essential component of a comprehensive security program.