Federal Agencies Focus on Metrics and Integration to Mature Insider Threat Programs

Federal agencies face continuing challenges in maturing insider threat programs as the reported annual cost of incidents rises from about $16.2 million to $17.4 million. The figures underscore the operational and financial stakes of identifying and addressing insider risks, while the recommendations in this signal focus on strengthening program foundations rather than responding to a specific solicitation. The source is a Federal News Network commentary featuring Tim Kirkham, vice president of the Investigations Practice at Ontic.

Kirkham’s recommendations begin with clear program ownership and a review of the people and technology already in place. For agencies, assigning dedicated responsibility can help establish accountability for program development and coordination. Reviewing existing personnel, processes, and tools can also help identify capability gaps before an agency defines new requirements. That sequence is relevant to procurement planning: agencies can distinguish problems that require improved governance or integration from gaps that may warrant additional technology or contractor support.

The signal also emphasizes demonstrating measurable early results and integrating data systems. Early, defensible outcomes can help agencies assess whether program changes are working and make the case for sustained investment. Integration can support a more connected view of relevant information, although the source does not specify a platform, technical architecture, or particular data sources. Kirkham links root-cause analysis to program maturity, saying: “It’s that root cause analysis that allows you to continue to mature your program, that is then going to give you the trending metrics that you need to support your program.” For contractors, this points to the value of showing how proposed capabilities support analysis, interoperability, and measurable outcomes without implying that an acquisition is underway.

The source identifies the Federal Bureau of Investigation, the Supreme Court of the United States, and the Food and Drug Administration in connection with the broader federal insider-threat discussion, but provides no agency-specific budget, requirement, or procurement schedule for them. It names Ontic through Kirkham’s role, not as a selected vendor or award recipient. Accordingly, this is a program-development trend rather than a current buying opportunity. Procurement teams can use the recommendations to structure capability assessments and future market research, while vendors should avoid treating the reported cost increase as evidence of an open solicitation or an agency commitment to purchase.

• Reported annual insider-threat incident costs increased from about $16.2 million to $17.4 million.
• Tim Kirkham, Ontic’s vice president of the Investigations Practice, recommends assigning dedicated program ownership.
• Agencies are encouraged to review existing people and technology before defining capability gaps or requirements.
• Demonstrating measurable early results can help agencies assess progress and support continued program investment.
• Integrating data systems is identified as a program-maturity priority; no specific product or architecture is named.
• Kirkham says root-cause analysis can generate trending metrics that support ongoing program development.
• The Federal Bureau of Investigation, Supreme Court of the United States, and Food and Drug Administration are named, but no agency-specific acquisition is detailed.
• Ontic is mentioned as Kirkham’s company; the source does not identify a vendor selection, contract award, or procurement contact.
• Contractors can position relevant offerings around integration, analysis, and measurable outcomes, while treating this as market context rather than an active opportunity.