Statement on TMPC Support for CISA’s Insider Threat Management Guidance

The Threat Management Program Cell (TMPC), recognized as the Department of Defense’s premier Insider Threat program, is uniquely positioned to advance and support the Cybersecurity and Infrastructure Security Agency’s (CISA) guidance on Assembling a Multi-Disciplinary Insider Threat Management Team, released January 28, 2026.

https://www.cisa.gov/news-events/news/cisa-urges-critical-infrastructure-organizations-take-action-against-insider-threats

TMPC embodies the mature, multi-disciplinary approach CISA advocates, integrating expertise from cybersecurity, human resources, legal counsel, security operations, intelligence, and behavioral analysis into a cohesive threat management framework. Operating under a proven structure that aligns closely with CISA’s “Plan, Organize, Execute, and Maintain” (POEM) model, TMPC conducts continuous user activity monitoring, data security audits, and rigorous vendor due diligence while fostering cross-functional collaboration to detect, assess, and mitigate both malicious and unintentional insider risks.

TMPC can support CISA’s guidance in the following key ways:

  • Serving as a Model Program: TMPC’s established cross-functional team—drawing from insider threat analysts, security officers, legal experts, and behavioral specialists—demonstrates the holistic, scalable team composition CISA recommends, providing a real-world benchmark for critical infrastructure organizations and SLTT governments.
  • Sharing Best Practices and Expertise: As a leading DoD program, TMPC can offer practical insights, training resources, and lessons learned on building trusted teams, protecting sensitive information, ensuring legal compliance, and promoting a culture of reporting—directly reinforcing CISA’s emphasis on workforce trust and early intervention.
  • Facilitating Interagency and Partner Collaboration: TMPC can partner with organizations to deliver joint workshops, exercises, and technical assistance, helping organizations implement multi-disciplinary teams while leveraging advanced monitoring tools, anomaly detection methodologies, and integrated audit processes.
  • Enhancing National Resilience: By aligning TMPC’s capabilities with CISA’s roadmap, the program can contribute to broader national efforts to reduce insider vulnerabilities, prevent workplace violence, and strengthen defenses across critical infrastructure sectors.

TMPC stands ready to collaborate with organizations and its stakeholders to operationalize this guidance, ensuring organizations transform potential vulnerabilities into strengths through resilient, people-centered insider threat management. This partnership exemplifies how mature government programs can empower the broader community to confront one of the most serious challenges to organizational security.