The ITPSO is responsible for establishing and executing which program at the facility?

• A. Insider threat program
• B. Cybersecurity program
• C. Physical security program
• D. Information assurance program

Answer: (A)

Insider threat program focuses on identifying, preventing, and responding to risks from individuals who have authorized access. The ITPSO is responsible for establishing and executing this program at the facility because it sits at the intersection of information security and personnel security, requiring coordinated policies, training, monitoring, and incident handling. This program covers developing the rules for detecting suspicious behavior, providing awareness training, setting up reporting channels, coordinating investigations, and implementing corrective actions.

Cybersecurity program, while essential, is broader and centers on protecting IT systems from a wide range of threats, not specifically on managing insider risk. Physical security program targets securing the facility and controlling access to locations, but doesn’t address the ongoing insider-risk governance and response processes. Information assurance program encompasses broad information risk management but doesn’t focus exclusively on insider threats. The insider threat program is the best fit for the ITPSO’s responsibility.