Employee monitoring is a growing trend as workers move remotely and businesses seek to stay in touch with any changes in employee activity that could trigger an insider threat. This is a phenomenon that the government has been monitoring for decades and has recently established through its ongoing assessment and ongoing audit programs. ClearanceJobs caught up with Brian Dunbar, Director of Security for CAICNational Security and Innovative Solutions Sector. Prior to his role with CACI, Dunbar spent more than 30 years with the CIA, including as Deputy Director of the National Counterintelligence and Security Center. Dunbar has previously discussed with ClearanceJobs the implementation of CE and its role in replacing episodic periodic reviews.
Holders of continuous verification and authorization
- 2:05 – Why continuous assessment is so important.
- 6:00 a.m. – Private sector applications of employee verification.
- 9:00 a.m. – What is a CE flag or alert and what does it mean.
- 10:30 a.m. – The benefits of the CV.
“Continuous assessment is the keystone of the entire personnel verification reform effort and serves as the backbone of continuous verification,” Dunbar said.
Technology and automation were key aspects of the Trusted Workforce 2.0 modernization effort.
“One of the big questions we asked was how to extract and transmit critical information between agencies in real time,” Dunbar said.
Continuous verification is a new way of dealing with data, but not a change in the policy behind what data is considered in the security clearance process – it’s the same decision-making guidelines, the same self-checking requirements. statement and the same data sets – but ongoing, rather than the five or ten year interval of a periodic review.
“We’re able to check these things in real time, and obviously that’s better,” Dunbar noted.
CE Empowering Proactive Personnel Help
Dunbar stressed that CV isn’t just about improving security in government and the private sector, it’s about giving employees the ability to fix problems early. This is one area where the private sector can take advantage of a tip from the government – educating employees about what data is audited and why it matters.
A New York Times This article has recently highlighted the rise of continuous assessment and monitoring programs across the public and private sector. The article noted that it was not just the government that was worried about insider threats. Many private sector companies also apply employee verification technologies. The way forward is often easier in the private sector, where the rules and provisions of privacy law do not apply. The rules and policies governing employee verification may differ between the public and private sectors, but in many cases the technologies available to do so – and the benefits to the business or agency – are the same.
“Similarly, in the private sector, audits and proactive audits provide opportunities to engage and resolve issues before they reach a crisis stage,” Dunbar said.
Employee education is key, Dunbar said, and it’s something the government worked very hard on in the years leading up to the deployment of CE in the security clearance population. He said that by educating employees “early and often,” he believes they were able to gain the buy-in needed for the program to succeed.
“Everyone affected was reprimanded early and often as we go down this path,” Dunbar said.
For better or worse, the rise in social media usage has reduced concerns about employee surveillance.
“Many people’s lives become very public through their deliberate actions and activities on social media and other public platforms,” Dunbar said.
And whether it’s social media or credit checks, the same policies apply to CE and CV efforts that applied when the government conducted episodic investigations.
“It doesn’t really change the dynamic of what’s being reviewed…it’s just a different, more modern way of doing verification,” Dunbar said.