Low Cost Technical Solutions to Jump Start an Insider Threat Program

SEI Report
This technical note explores free and low cost technical solutions to help organizations prevent, detect, and respond to malicious insiders.
Publisher

Software Engineering Institute

CMU/SEI Report Number
CMU/SEI-2016-TN-004
DOI (Digital Object Identifier)
10.1184/R1/6575156.v1
Topic or Tag

Abstract

This technical note explores free and low cost technical solutions to help organizations prevent, detect, and respond to malicious insiders. The tools presented address the needs of organizations to have, at a minimum, user activity monitoring, data loss prevention, security information and event management, analytics, and a digital forensics and investigation capability. Implementing tools in all of these categories will help an organization have a successful insider threat program.

Cite This SEI Report

Silowash, G., Spooner, D., Costa, D., & Albrethsen, M. (2016, December 12). Low Cost Technical Solutions to Jump Start an Insider Threat Program. (SEI Report CMU/SEI-2016-TN-004). Retrieved September 16, 2026, from https://doi.org/10.1184/R1/6575156.v1.

@techreport{silowash_2016,
author={Silowash, George and Spooner, Derrick and Costa, Dan and Albrethsen, Michael},
title={Low Cost Technical Solutions to Jump Start an Insider Threat Program},
month={Dec},
year={2016},
number={{CMU/SEI-2016-TN-004},
institution={Software Engineering Institute, Carnegie Mellon University},
doi={10.1184/R1/6575156.v1},
url={https://doi.org/10.1184/R1/6575156.v1},
note={Accessed: 2026-Sep-16}
}

Silowash, George, Derrick Spooner, Dan Costa, and Michael Albrethsen. "Low Cost Technical Solutions to Jump Start an Insider Threat Program." (CMU/SEI-2016-TN-004). Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, December 12, 2016. https://doi.org/10.1184/R1/6575156.v1.

G. Silowash, D. Spooner, D. Costa, and M. Albrethsen, "Low Cost Technical Solutions to Jump Start an Insider Threat Program," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, SEI Report CMU/SEI-2016-TN-004, 12-Dec-2016 [Online]. Available: https://doi.org/10.1184/R1/6575156.v1. [Accessed: 16-Sep-2026].

Silowash, George, Derrick Spooner, Dan Costa, and Michael Albrethsen. "Low Cost Technical Solutions to Jump Start an Insider Threat Program." (SEI Report CMU/SEI-2016-TN-004). Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 12 Dec. 2016. https://doi.org/10.1184/R1/6575156.v1. Accessed 16 Sep. 2026.

Silowash, George; Spooner, Derrick; Costa, Dan; & Albrethsen, Michael. Low Cost Technical Solutions to Jump Start an Insider Threat Program. CMU/SEI-2016-TN-004. Software Engineering Institute. 2016. DOI: 10.1184/R1/6575156.v1. https://doi.org/10.1184/R1/6575156.v1