Insider Threat Awareness Training
The University of Michigan is committed to protecting the people, discoveries and resources that make our research enterprise one of the world’s leading centers of innovation.
As part of this commitment, U-M is introducing Insider Threat Awareness Training, a new university-designed annual training requirement intended to help members of our community recognize potential security risks, safeguard university resources and report concerns appropriately.
The training supports a safe, secure and collaborative research environment while reinforcing the university’s commitment to academic freedom, openness and responsible research practices.
Complete the training
Faculty, staff and employed students are required to complete Insider Threat Awareness Training annually as part of the university’s broader research security efforts.
Training deadline: January 29, 2027
Estimated completion time: 30 minutes
Frequency: Annually
Frequently asked questions
1. What is an insider threat?
An insider threat is the potential for someone with authorized access to university resources to use that access, knowingly or unknowingly, in ways that could cause harm. Insider threats can involve the misuse or unauthorized disclosure of research data, sensitive information, intellectual property, equipment or other university resources. Importantly, an insider threat describes a risk associated with access and behavior, not a particular type of person or membership in any community.
2. Why is U-M requiring this training?
Protecting university research, information and other resources is a shared responsibility. Insider Threat Awareness Training helps our community recognize potential risks and take appropriate steps to prevent harm. The training also supports federal research security requirements established under National Security Presidential Memorandum 33 (NSPM-33), which calls for certain federally funded research institutions to maintain research security programs that include insider threat awareness. These efforts help protect the university’s research partnerships, federal funding, academic mission and reputation for excellence.
3. Who is required to complete the training?
All faculty, staff and employed students are required to complete Insider Threat Awareness Training annually. The training must be completed by Jan. 29, 2027, and is accessible on a computer or tablet. The training is also strongly encouraged for all students who engage with research.
4. What will I learn during the training?
The training focuses on three practical actions:
- Recognize: Understand what constitutes an insider threat and identify observable behaviors that may indicate a potential security risk.
- Protect: Apply everyday safeguards to protect university information, research materials, systems, facilities and people.
- Report: Understand how and when to report concerns through appropriate university channels.
The training underscores that insider threat behavior is not associated with protected speech or approved research activity. Concerns should be based on objective observations, not assumptions about individuals or groups.
5. What should I do if I observe a potential insider threat?
If you observe concerning activity, document the objective facts, including what happened, when and where it occurred and any relevant context. Report your concerns promptly through the University of Michigan Division of Public Safety and Security (DPSS) or the U-M Hotline. Do not confront the individual, draw conclusions about their intentions or attempt to conduct your own investigation. University personnel responsible for evaluating these concerns will determine the appropriate next steps. If there is an immediate threat to life or property, call 911. Remember: Reporting a concern is a preventive action, not an accusation.