ISP ISP Personnel Security & Insider Threats 1 — Questions and Answers
Question 1: Which background investigation element is MOST critical when determining suitability for a sensitive industrial position?
- Credit history review
- Criminal record check
- Employment verification
- All of the above combined (Correct answer)
Correct answer: All of the above combined
A comprehensive personnel security determination requires combining criminal, credit, and employment checks rather than relying on any single element.
Question 2: An insider threat is BEST defined as a risk posed by which of the following?
- External hackers who gain physical access
- Current or former employees, contractors, or partners who misuse authorized access (Correct answer)
- Vendors who deliver supplies to the facility
- Foreign intelligence agents who never entered the facility
Correct answer: Current or former employees, contractors, or partners who misuse authorized access
Insider threats originate from individuals who already have or recently had authorized access and can abuse that trust.
Question 3: Which behavioral indicator is most commonly associated with a potential malicious insider?
- Working overtime during a major project
- Unexplained affluence inconsistent with salary (Correct answer)
- Taking vacation shortly after a performance review
- Requesting additional training on new equipment
Correct answer: Unexplained affluence inconsistent with salary
Unexplained wealth that cannot be reconciled with an employee's known salary is a classic red flag for theft or espionage.
Question 4: What is the purpose of a security clearance adjudication?
- To assign an employee's access level based solely on job title
- To determine whether granting access is clearly consistent with national or industrial security interests (Correct answer)
- To issue an employee identification badge
- To terminate employees who fail polygraph examinations
Correct answer: To determine whether granting access is clearly consistent with national or industrial security interests
Adjudication evaluates all available information to decide if an individual's access is consistent with security interests.
Question 5: Which program element is essential to a robust Insider Threat Program (InTP)?
- Installing covert recording devices in break rooms
- Establishing a multidisciplinary hub that integrates HR, IT, security, and legal data (Correct answer)
- Reviewing only IT access logs on an annual basis
- Reporting all suspicious behavior directly to law enforcement without internal review
Correct answer: Establishing a multidisciplinary hub that integrates HR, IT, security, and legal data
An effective InTP requires a cross-functional team that combines data from multiple departments to detect and deter insider threats.
Question 6: Pre-employment polygraph examinations in the industrial security context are PRIMARILY used to:
- Replace background investigations entirely
- Detect deception regarding undisclosed past activities relevant to suitability (Correct answer)
- Provide legally admissible evidence in court
- Measure psychological fitness for high-stress roles
Correct answer: Detect deception regarding undisclosed past activities relevant to suitability
Polygraphs are used as an investigative tool to surface undisclosed information, not to replace full background checks or provide court evidence.
ISP ISP Personnel Security & Insider Threats 1
Which background investigation element is MOST critical when determining suitability for a sensitive industrial position?