Question 1

What is an insider threat?

Accepted Answer

An insider threat is a security risk that originates from within an organization — including current or former employees, contractors, or business partners who have authorized access to systems or data. Insider threats can be malicious (intentional data theft, sabotage) or unintentional (negligence, falling for social engineering). In 2026, this category also includes fraudulent remote workers placed by nation-state actors.

Question 2

How long does the insider threat risk assessment take?

Accepted Answer

The Insider Threat Risk Profiler takes approximately 5–10 minutes to complete. It includes 30 questions across 6 domains: Remote Work Controls, Identity Verification, Data Access Monitoring, Employee Behavior Analytics, Offboarding Procedures, and AI & GenAI Controls.

Question 3

Is my data stored when I take the assessment?

Accepted Answer

No. All scoring and calculations run entirely in your browser (client-side). No responses, scores, or personally identifiable information are transmitted to or stored on any server.

Question 4

What are the biggest insider threat risks in 2026?

Accepted Answer

The top emerging insider threat vectors in 2026 include: (1) GenAI data exfiltration — employees pasting sensitive data into external LLMs like ChatGPT; (2) Nation-state fraudulent IT workers — DPRK and other actors placing fake remote employees inside organizations; (3) Agentic AI risks — autonomous AI systems with broad access that can be compromised via prompt injection; (4) AI-enhanced social engineering — voice cloning and AI-generated spear-phishing; and (5) Deepfake identity fraud during hiring and virtual meetings.

Question 5

What frameworks does this assessment align with?

Accepted Answer

The Insider Threat Risk Profiler aligns with NIST SP 800-53, NIST SP 800-171, the CERT Insider Threat Center's publications, ISO 27001, and incorporates guidance from CISA and FBI advisories on nation-state insider threats issued in 2024–2026.

Question 6

Can I export my results?

Accepted Answer

Yes. After completing the assessment, you can generate and download a PDF report containing your scores by category, maturity levels, prioritized recommendations, and emerging threat considerations — suitable for sharing with leadership or a board.