Personam maps to the National Industrial Security Program Operating Manual, providing behavioral monitoring for cleared contractor facilities that protects classified information against insider threat and credential-based access abuse.
Direct monitoring: Insider threat program requirements, NISPOM mandates insider threat detection capabilities. Personam has been deployed in a U.S. government environment and is built around the insider threat detection problem NISPOM describes.
Direct monitoring: User activity monitoring must detect anomalous behavior by cleared personnel. Personam profiles each monitored user against their peer group and flags behavioral shifts.
Direct monitoring: Access control to classified systems must be enforced and monitored. Personam detects access outside established behavioral patterns.
Direct monitoring: Continuous monitoring of information systems is required. Personam provides continuous behavioral coverage across monitored network entities.
Direct monitoring: Incident response, security incidents must be detected and reported promptly. Personam identifies behavioral incidents within minutes.
Direct monitoring: Network monitoring for unauthorized activity. Personam monitors all east-west and perimeter network metadata.
Supporting evidence: Incident reporting, Personam identifies behavioral security incidents and retains the supporting session detail. Reporting to the cognizant security agency remains a facility responsibility.
Supporting evidence: Information system security, behavioral evidence supports ISSO documentation and authorization package requirements. The documentation itself is produced by the facility.
| Requirement | How Personam Addresses It | How Personam Helps |
|---|---|---|
| §2-300 Insider Threat Program | Surfaces behavioral deviation across cleared-facility networks while narrowing analyst review to a small fraction of the monitored population. | Direct monitoring |
| §8-100 User Activity Monitoring | Profiles monitored cleared users against their behavioral peer group and flags anomalous activity as it crosses the sensor. | Direct monitoring |
| §8-600 Access Controls | Detects access to classified systems and data by personnel operating outside their established behavioral scope. | Direct monitoring |
| §8-100 System Monitoring | Provides continuous behavioral monitoring across monitored network entities in cleared contractor environments. | Direct monitoring |
| §1-300 Incident Reporting | Identifies behavioral security incidents within minutes and provides the supporting session detail for required reporting. | Supporting evidence |
| §8-600 Network Monitoring | Monitors network metadata for anomalous lateral movement, data staging, and exfiltration behavior. | Direct monitoring |
| §11-200 SCIF Monitoring | Behavioral monitoring of network activity within and adjacent to sensitive compartmented information facilities. | Direct monitoring |
| §12-300 Information System Security | Provides behavioral evidence supporting ISSO documentation and authorization package requirements. | Supporting evidence |
| §8-600 Audit Trail | Maintains continuous behavioral audit record with the supporting session detail for cleared contractor personnel activity. | Direct monitoring |
Personam addresses the monitoring and detection requirements within this framework. Full compliance requires controls beyond any detection platform.
Book a 30-minute live demo showing behavioral detection mapped to your specific regulatory requirements.
Schedule a Demo