Insider Threat

The insider threat refers to the risk arising from maritime employees conducting or facilitating a security incident through use of their authorized access, thereby giving them a tactical advantage.

Insiders are full or part-time employees (including contractors, temporary and self-employed personnel) who are working in or for the maritime sector (including shipping and ports and other maritime stakeholders). Their role provides them with privileged access and/or knowledge to secured locations, items or sensitive security information. Insiders may conduct or facilitate a security incident through a lack of awareness, complacency or maliciousness.

This toolkit, developed for training purposes by the IMO Maritime Security Section in collaboration with the International Civil Aviation Organization, is designed to assist organizations operating in the maritime environment, including Maritime Administrations, Designated Authorities, shipping companies, port operators and other maritime stakeholders, to better react to the ever-evolving insider threat. Terrorists, organized crime groups and other hostile perpetrators consistently look to exploit vulnerabilities in security controls and commit security incidents against both the shipping and port sectors. Such security incidents could be facilitated through the exploitation of insiders.