Software Engineering Institute

The Insider Threat Vulnerability Assessment (ITVA) is an evidence-based, capability-level assessment. ITVA is designed to measure an organization's preparedness to prevent, detect, and respond to insider threats against a reference model derived from analysis of actual insider incidents. The ITVA identifies key capability gaps in the protection of an organization's critical assets from authorized access misuse, and provides recommended mitigation strategies for common vulnerabilities to specific assets.