Code of Federal Regulations Title 32. National Defense § 32.2004.24 Insider threat program

(1) Verifying that entities appoint insider threat program SOs;

(2) Requiring entities to monitor, report, and review insider threat program activities and response actions in accordance with the provisions set forth in the NISPOM (or equivalent);

(3) Providing entities with access to data relevant to insider threat program activities and applicable reporting requirements and procedures;

(4) Providing entities with a designated means to report insider threat-related activity;  and

(5) Advising entities on appropriate insider threat training for entity employees eligible for access to classified information.