Insider Threat Program Expert Certificate

About

The Insider Threat Program Expert is AIIT’s most advanced professional program, designed for experienced practitioners who are ready to move beyond operating insider threat activities and into assessing, shaping, and leading insider threat capability at an enterprise level.

This program is built on a hard but often overlooked reality: Most insider threat failures are not caused by missing tools, policies, or technology. They are caused by poor judgement under uncertainty, weak maturity assessment, and an inability to advise leaders clearly when trade-offs are unavoidable.

Over 10 weeks, participants operate inside a single evolving organisational scenario that mirrors real life. Information is incomplete. Signals are ambiguous. Stakeholders disagree. Third-party dependencies and AI-enabled systems introduce risk beyond organisational boundaries.

Decisions made early in the program have consequences later, forcing participants to think systemically rather than tactically.

Objectives

By the end of this masterclass, participants will be able to:

- Assess insider threat program maturity using structured, evidence-based models

- Diagnose systemic organisational weaknesses that amplify insider risk over time

- Design realistic, risk-based uplift strategies aligned to organisational constraints

- Apply ethical, privacy, and trust principles in ambiguous, high-pressure situations

- Address insider risk involving third parties, contractors, privileged administrators, and AI-enabled systems

- Translate insider threat risk into clear, executive- and board-level language

- Defend decisions using recognised frameworks, metrics, and professional judgement

Topics Covered

- Insider Threat Program Governance & Practitioner Responsibilities

- Insider threat capability architecture and common failure modes

- Program maturity assessment and auditability

- Alignment to the SEI Common Sense Guide (22 practices)

- AIIT Insider Resilience Framework mapping

- Behavioural and technical detection at scale

- Signal vs noise, bias, and false positives

- Strategic uplift planning and prioritisation

- Third-party, contractor, and privileged access risk

- Ethical decision-making and lawful monitoring

- Governance, oversight, and executive reporting

- Crisis response, consequence management, and recovery

- Leader enablement, incentives, and speak-up culture

Benefits

Expert-Level Confidence:

The ability to assess insider threat capability, challenge assumptions, and advise senior leaders without relying on tools, templates, or hindsight.

Defensible Professional Authority

Clear, structured reasoning aligned to recognised best practice, enabling confident defence of decisions to executives, boards, regulators, or auditors.

Reusable Practical Artefacts

Participants leave with artefacts they can reuse immediately, including maturity assessments, SEI crosswalks, framework mappings, KPI dashboards, executive briefings, and decision rationale templates.

Real-World Readiness

Experience dealing with insider risk as it actually unfolds - slowly, ambiguously, and across organisational boundaries, not as a one-off exercise.

Who Should Attend

This program is designed for experienced professionals who already understand insider threat fundamentals and operations, and who are now expected to advise, influence, or lead at a higher level.

It is particularly suited to:

- Insider Threat Program Managers and Leads

- Security, Cybersecurity, and Risk Leaders

- HR, Legal, Compliance, and Governance professionals supporting insider risk

- Behavioural risk, integrity, and fraud specialists

- Senior practitioners preparing to brief executives or boards

- Professionals progressing toward Trainer or enterprise leadership roles

Prerequisite

Completion of the Insider Threat Program Professional (or equivalent experience, subject to AIIT approval).