Insider threats (InTs) within organizations are small in number but have a disproportionate ability to damage systems, information, and infrastructure. Existing InT research studies the problem from psychological, technical, and educational perspectives. Proposed theories include research on psychological indicators, machine learning, user behavioral log analysis, and educational methods to teach employees recognition and mitigation techniques. Because InTs are a human problem, training methods that address InT detection from a behavioral perspective are critical. While numerous technological and psychological theories exist on detection, prevention, and mitigation, few training methods prioritize psychological indicators. This literature review studied peer-reviewed, InT research organized by subtopic and extracted critical theories from psychological, technical, and educational disciplines. In doing so, this is the first study to comprehensively organize research across all three approaches in a manner which properly informs the development of an InT education platform.

翻译：组织内部的内部威胁（InTs）数量虽少，却对系统、信息和基础设施具有不成比例的破坏能力。现有内部威胁研究从心理学、技术和教育视角探讨该问题。提出的理论包括对心理指标、机器学习、用户行为日志分析的研究，以及用于教导员工识别与缓解技术的教育方法。由于内部威胁本质上是人的问题，从行为视角出发解决内部威胁检测的培训方法至关重要。尽管存在大量关于检测、预防和缓解的技术与心理学理论，但优先考虑心理指标的培训方法却寥寥无几。本文献综述研究了按子主题组织的、经过同行评审的内部威胁研究，并从心理学、技术和教育学科中提取了关键理论。通过这种方式，本研究首次以全面整合三种研究路径的方式对相关研究进行了系统梳理，从而为内部威胁教育平台的开发提供了恰当的理论依据。