A Study on the Development Plan of the Defense Insider Threat Program (InTP) Maturity Framework in Line with the Characteristics of Defense Companies

In Korea, the scope of technology leakage is expanding due to the advancement of the level of defense science and technology and the diversification of research subjects, and overseas attempts to leak technology through cyberattacks such as intensifying competition for technology acquisition and infringement of new defense systems are increasing. Most types of technology leakage occur in relation to insiders. Therefore, this paper presents an insider threat program (InTP) maturity framework that matches the characteristics of defense companies. InTP can respond to insider threats by using the framework as a roadmap for function, process, procedure, resource advancement strategic goals and target development at the defense company level. In addition, InTP should integrate considerations for unique defense company business areas, manpower environment, and technology infrastructure when establishing action plans and action plans. In addition, InTP needs to take measures such as ensuring that products developed by the participation of defense companies' own legal advice, personal information protection officers, auditors, etc. at the beginning of the planning process comply with all related laws, privacy and civil liberties, and protection of whistleblowers.