Skip to main content
Back to results
NIST 800-171 R-3.2.3

Train on Insider Threat Indicators

Official citation: 3.2.3

Class: core · Severity: medium

Statement of the obligation — verify against source

3.2.3

What it means

Teach staff to recognize and report potential insider-threat warning signs — for example long-term job dissatisfaction, attempts to access information they don't need, unexplained finances, harassment or workplace violence, or serious policy violations. Training should also explain how to raise concerns through the proper organizational channels, and can be tailored by role (managers watch for behavior changes; employees for more general observations).

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.