The Insider Quantification and Ranking Process (IQRP) is an assessment tool that effectively and accurately identifies and documents the potential negative effects an insider can have on the site’s protective posture. This analysis involves conducting interviews, physical protection analyses, validating or invalidating current analysis documentation or assumptions. The "risk-based" interview questionnaire aids in the quantification, or scoring, of insiders based off access, authority, and knowledge. The scoring tool allows analysts to transition from qualitative information to quantitative data, similar to the Kepner-Tregoe process, to further prioritize the analysis results based on the criteria of significance. The interview questionnaire is designed to validate, or invalidate, assumptions associated with job categories and associated capabilities. Capabilities include access, authority, and knowledge. Questions for access and authority tend to be closed-ended (black and white), while knowledge is more open-ended (gray). After the questionnaire is complete, answers are scored based on a ranking matrix. To be clear, this tool is designed to assess currently employed personnel by position, their potential to become an inside threat, and how dangerous an insider threat they could post. It does not identify individuals that are nefarious insiders. After completing the assessment, facility manager could better determine the critical positions and consider ways to implement mitigation strategies, such as a Human Reliability Program (HRP). Until now, this process has mostly been tested and implemented at static sites for site specific physical security. This paper will discuss its application to secure transport, including adaption and potential adoption by secure transport operators.
The major benefit of an engagement focusing on an assessment tool rather than implementation of personnel security or an HRP is that it requires minimal costs aside from staff time and no capital investments. Background screenings, periodic monitoring, and continuing medical examinations through an HRP require major advancements. The IQRP simply requires the time of several staff members. It is an enlightening evaluation in that management often does not see the way that insider potential varies from individual to individual and from position to position. This assessment tool provides quantitative data that facility management can use when considering how to address the concerns over insider threat. These benefits make it especially beneficial in the international community, which may not have the resources to invest in large-scale HRP or other insider mitigation programs.
This paper will describe the process and highlight how it can be applied to secure transport, especially when considering the role of contractors, coordination between the transporter and local law enforcement, and the role of response.