KSA Matrix — Insider Threat Analyst Career Framework

Sources & attribution

NICE InT — KSAs from the NIST NICE Framework Insider Threat Analysis work role (SP 800-181r1). Public domain.

Adjacent — KSAs cherry-picked from related NICE work roles: Incident Response, Digital Evidence Analysis, Threat Analysis. Source role shown on each KSA.

Custom — KSAs written for this framework by insider threat practitioners, drawing on operational experience, industry research, and published best practices. Sources include CMU SEI Common Sense Guide, SIFMA Best Practices, MITRE Behavioral Risk Framework, SOFIT 2.0, and direct subject matter expertise.

Frameworks referenced — MITRE ATT&CK · InT TTP KB v2.0 · CDSE/DSI · NCFTA · NITTF · ATAP

🤖 Use this matrix with your AI assistant

Want to feed this KSA framework into an LLM, Copilot, or your own RAG pipeline? Download a machine-readable JSON export of the full matrix — every KSA with its ID, description, type, source, concentration, and level. Use it for career planning prompts, gap analysis, job description generation, or whatever you can dream up.

This export is provided for individual and organizational use. Attribution appreciated: insiderthreatanalyst.com. Data is structured, not copyrighted text — use freely.

KSA Matrix · Insider Threat Analyst Career Framework

🤖 Use this matrix with your AI assistant