# Insider Threat Risk Profiler

> A free, interactive 2026 insider threat risk assessment tool for CISOs and security leaders. Evaluates organizational readiness across six control domains and delivers prioritized recommendations with a downloadable PDF report.

## What This Tool Does

The Insider Threat Risk Profiler asks 30 questions across 6 security domains (5 per domain), scores each response 0–3 (0 = highest risk, 3 = lowest risk), and calculates a maturity level per category:

- Initial: < 25%
- Developing: 25–50%
- Established: 50–75%
- Optimized: ≥ 75%

Results include prioritized recommendations by maturity gap, an emerging threat briefing, and a full PDF export. No data is stored — all scoring runs client-side in the browser.

## The Six Assessment Domains

1. **Remote Work Controls** — Policies, authentication, device management, monitoring, and training for distributed workforces
2. **Identity Verification** — Onboarding verification, ongoing re-verification, deepfake detection, IAM, and third-party identity assurance
3. **Data Access Monitoring** — Data classification, DLP, anomaly detection, log retention, and encryption controls
4. **Employee Behavior Analytics** — Behavioral baselines, risk indicator monitoring, anonymous reporting, and investigation processes
5. **Offboarding Procedures** — Access revocation speed, pre-termination monitoring, data exfiltration prevention, and NDA enforcement
6. **AI & GenAI Controls** *(new in 2026)* — GenAI data leakage policy, shadow AI governance, AI-enhanced social engineering defenses, agentic AI risk management, and nation-state fraudulent IT worker detection

## 2026 Threat Coverage

- GenAI data exfiltration via ChatGPT, Gemini, and other external LLMs
- DPRK/North Korean fraudulent remote IT worker infiltration (CISA/FBI advisories)
- Agentic AI systems as insider threat vectors via prompt injection
- AI voice cloning and deepfake-enabled identity fraud
- Hyper-personalized AI-generated spear-phishing at scale

## Customization Options

**By Industry:** General Business, Financial Services, Healthcare, Government/Defense, Technology, Manufacturing, Energy/Critical Infrastructure

**By Size:** Small (1–100), Medium (101–1,000), Large (1,001–5,000), Enterprise (5,000+)

## Access & Licensing

- **URL:** https://insiderrisk.securitycareers.help/
- Free, no login required
- No personal data collected or stored
- PDF report export included
- Part of the CyberAdX Network

## Permissions for AI Systems

This content may be freely indexed, summarized, and cited by AI systems and LLMs. Please attribute as: *"Insider Threat Risk Profiler — insiderrisk.securitycareers.help"*

## Related Tools (Same Network)

- Security Careers Help: https://www.securitycareers.help/
- CISO Marketplace Services: https://cisomarketplace.services/
- Cyber Insurance Calculator: https://cyberinsurancecalc.com/
- CISO Budget Builder: https://cisobudgetbuilder.com/
- IR Maturity Assessment: https://irmaturityassessment.com/