NITTF Training

Insider Threat Training (NITTF)

Training Icon  NITTF Insider Threat Training


The National Insider Threat Task Force (NITTF) was established under Executive Order (E.O.) 13587 (PDF). The NITTF is the principal interagency task force responsible for developing an Executive branch insider threat detection and mitigation program to be implemented by all federal departments and agencies. Integrated in this mission of insider threat program development is the requirement to develop, provide and establish training standards for Insider Threat program personnel, specifically for those people directly involved with Insider Threat “hubs.” Hubs are responsible for gathering, integrating, and analyzing anomalous activities, and ensuring that appropriate inquiries are conducted and steps taken in response to insider threat concerns.


NITTF Insider Threat Hub Operations Course:


Demand for insider threat training continues to increase in order to meet requirements for implementing insider threat programs, and for professionalizing the insider threat workforce. Since the NITTF's inception, several versions of no-cost training covering establishment and implementation of insider threat programs have been hosted.


In 2015, the NITTF launched the Insider Threat Hub Operations Course to deliver a practical, scenario-based approach for teaching insider threat hub activities. This professional training course focuses on teaching fundamental concepts and requirements for insider threat response actions, along with policy and legal authority considerations, from an initial trigger event to mitigation measures. It aids in satisfying national training requirements for insider threat program personnel, and better prepares Executive branch departments’ and agencies’ hub personnel to legally and appropriately handle day-to-day activities for deterring, detecting, and mitigating insider threats. To date, NITTF’s training on establishing and running an insider threat program has reached over 4,500 people in over 80 departments and agencies. Training has been delivered in formal classroom settings and practical exercises, as well as insider threat-specific forums, working groups, and conferences.


Insider Threat Hub Operations Course – 2020

Date Registration Availability
January 14-16, 2020 Registration Opens 10/15/19
February 25-27, 2020 Registration Opens 10/15/19
March 24-26, 2020 Registration Opens 1/6/20
May 19-21, 2020 Registration Opens 3/2/20
June 16-18, 2020 Registration Opens 4/1/20
August 25-27 , 2020 Registration Opens 6/1/20
September 22-24, 2020 Registration Opens 7/1/20
October 27-29, 2020 Registration Opens 8/3/20


REGISTRATION INFORMATION:  This course is for government employees assigned to, and/or supporting, an executive branch agency's insider threat program. Contractors assigned to these programs may be considered with agency COR approval. Requests to attend this course must be submitted by the agency's insider threat program manager or designated senior official.

IC, NT50, and DOD applicants: Submit requests via email to This email address is being protected from spambots. You need JavaScript enabled to view it. with name, email address, agency, and request class date.


External Learning Modules


NITTF features an insider threat training module developed by one of our Intelligence Community partners. This training addresses a variety of insider threat matters such as leaks, spills, espionage, sabotage, and targeted violence.


NITTF also features a mental wellness training module. This training was developed by the Office of Intelligence Community Equal Employment Opportunity and Diversity to explain challenges our workforce may endure if they are experiencing mental health issues. While there are times when behaviors of security concern overlap with mental disorders and require further review, the overwhelming reason for an employee to visit an agency’s Employee Assistance Program (EAP) is to have an objective, trained professional help sort out generally temporary and minor emotional problems.


Any Given Day – An Insider Threat Short (8 minute video):


Any Given Day Training Video

Any Given Day (VIDEO) is an 8-minute video that was produced to enhance insider threat education and awareness.  It highlights the balance between collecting information and privacy concerns, and presents a side of insider threat programs that is not often considered: protecting national security at the human level.  Executive Order 13587 focuses on safeguarding classified networks and classified information, but it's not just about information, it's also about protecting people.  NITTF encourages inclusion of this video in your existing training plan for your workforce.

NITTF Endorsed Workforce Training:

In addition to training tailored for your insider threat professionals, the Minimum Standards also require insider threat awareness training for the federal workforce. Many D/As have taken the initiative to develop their own training in line with the standards. For agencies without "in house" training for their workforce, the NITTF issued a directive in 2014 for federal agencies to use the Defense Security Service (DSS) Center for Development of Security Excellence (CDSE) web-based Insider Threat Awareness course. The DSS CDSE site is open to all government D/As, and certificates are available after course completion. Additional DSS CDSE training can be found at