A tailored, interactive insider threat training program helped a national energy sector organisation strengthen its managers’ ability to recognise and respond to insider threats.
THE CHALLENGE
A national energy sector organisation plays a central role in critical infrastructure networks. It wanted to raise awareness of insider threat among its people and strengthen its internal capability to detect and respond to it. Generic awareness material would not reflect its operating context or risk profile. The organisation needed a targeted program designed around its own environment and risk profile, delivered in a way that would engage managers in critical roles and give them practical tools they could apply in their day-to-day work. Over time, the program also needed to extend awareness beyond the first audience to the broader workforce.
OUR APPROACH
Agilient designed and delivered an insider threat training program in close collaboration with the organisation’s security and personnel teams. The work followed a four-phase method: analyse, design, conduct and evaluate, and online transition. Sessions were delivered in person across several of the organisation’s sites and were aimed at people in critical managerial roles. Each session was interactive, using real-world case studies, scenario-based exercises and group problem-solving rather than lecture-style delivery, so managers could work through realistic situations together. Content focused on recognising behavioural indicators of insider threat activity, understanding social engineering tactics, and reinforcing appropriate reporting and mitigation practices. Sessions reinforced the part managers play in recognising concerns early and reporting them through the right channels. The program drew on Agilient’s experience in insider threat management, and was structured so the face-to-face sessions could later be transitioned into online modules to reach the broader workforce.
THE OUTCOME
The program supported the organisation in embedding insider threat awareness into its culture and operational practices, strengthening its protective security posture.
- Interactive in-person training for managers in critical roles, tailored to the organisation’s risk profile
- Practical content on behavioural indicators, social engineering and reporting and mitigation practices
- A delivery approach designed for later transition into online modules for the wider workforce
Related services: security awareness training, critical infrastructure security consultant, critical infrastructure and the SOCI Act. To discuss a similar project, contact Agilient.