An insider threat is the risk that an individual with authorized access to information, systems, facilities, or resources may intentionally or unintentionally use that access in a manner that could harm U.S. national security. Insider threats may also involve actions that compromise the University's ability to meet its obligations to safeguard classified information and fulfill federal security requirements.
The University of Arizona is committed to protecting its research, personnel, facilities, and information, including classified national security information entrusted to the University.
Recognizing Potential Insider Threats
Insider threats can arise from deliberate misconduct, negligence, or unintentional actions. Potential indicators may include:
- Unauthorized access, use, disclosure, or removal of sensitive or classified information.
- Attempts to obtain information beyond an individual's authorized access or need to know.
- Unexplained or suspicious requests for access to restricted information, systems, or facilities.
- Failure to follow established security procedures or attempts to circumvent security controls.
- Significant personal, financial, or professional difficulties that may affect an individual's judgment, reliability, or ability to safeguard sensitive information.
- Suspicious activities or behaviors that may indicate an effort to compromise protected information.
The presence of a single indicator does not necessarily mean an individual poses a threat. Personal challenges, including financial hardship, family difficulties, or emotional distress, do not automatically constitute security concerns. However, when accompanied by concerning behaviors or circumstances, they may warrant additional attention.
An insider threat is the risk that an individual with authorized access to information, systems, facilities, or resources may intentionally or unintentionally use that access in a manner that could harm U.S. national security. Insider threats may also involve actions that compromise the University's ability to meet its obligations to safeguard classified information and fulfill federal security requirements.
Concerns should be evaluated based on observable behaviors and circumstances, not assumptions about an individual's background, nationality, or personal characteristics.
Report a Concern
Protecting our research and national security is a shared responsibility.
University employees and others with access to research and other protected information are encouraged to promptly report activities or behaviors that may indicate a potential insider threat.
You do not need to determine whether an insider threat exists before reporting a concern. Reporting allows trained University personnel to assess the circumstances and determine whether additional action is warranted.
Reports should be made in good faith and based on observed activities, behaviors, or credible information. The University is committed to handling reports responsibly, respecting individual privacy, and protecting sensitive information.
If you see something concerning, report it. Early reporting can help prevent security incidents and protect the University's research mission.
To report a potential insider threat: Insider Threat Report Form