White Paper: Insider Risk Best Practices

ATARC Insider Risk Working Group | September 2025 

The purpose of this document is to provide government and industry leaders, managers and others with Government and Industry Subject Matter Expert informed recommendations to aid in designing and implementing a robust and effective Insider Risk (InR) mitigation program; Provide metrics and data to support requests for resources (funding, people and equipment); and assist the establishment of evidenced informed mitigation programs. Recommendations contained herein should be tailored to the organization’s security posture, policies, and risk tolerance; encourage and support correct behavior; deter, detect and prevent people from wrongdoing; and mitigate the impact of insider risk.