Disgruntled-Ego Insider Risk Profile
Spot insider threats by combining inflated self-belief, underperformance, and resentment
- Difficulty
- Advanced
- Time to result
- ~ongoing to results
- Steps
- 5
- Confidence
- 95%
This profile shifts insider-risk analysis away from crude stereotypes such as gambling or drinking and toward a behavioral combination: exaggerated belief in one's intelligence, weak performance or low effort, stalled recognition, and growing resentment toward the institution. The mechanism begins with a gap between self-image and results. When promotion or praise fails to match the person's expectations, that gap is interpreted as persecution rather than feedback. Alienation can then make betrayal feel like vindication, especially when the individual has access to valuable information. The profile is not a diagnostic test and no single trait establishes malicious intent. It is a structured prompt for closer, lawful assessment, improved supervision, access review, and early intervention when grievance, entitlement, underperformance, and sensitive opportunity converge.
Origin
Extracted from Masters in Business as Jack Devine compared the personalities of prominent American spies Rick Ames and Robert Hanssen.
Core principles
- 01Insider betrayal is often personal rather than ideological
- 02Inflated self-assessment can turn ordinary setbacks into perceived injustice
- 03Underperformance combined with entitlement creates resentment
- 04Alienation becomes dangerous when paired with sensitive access
- 05Behavioral patterns matter more than simplistic stereotypes
How to run it
- 1
Establish the performance baseline
Document objective responsibilities, results, feedback, and access. Separate verified underperformance from personality conflict or managerial bias.
Pro tip Use multiple reviewers and concrete evidence.
Watch out Subjective dislike is not an insider-risk indicator.
- 2
Assess the self-image gap
Look for a persistent mismatch between the individual's view of their ability and demonstrated results. Note whether feedback produces learning or intensified entitlement.
Pro tip Focus on repeated patterns rather than isolated defensiveness.
Watch out Confidence alone is not suspicious.
- 3
Evaluate grievance and alienation
Determine whether the person increasingly portrays the institution as hostile, unfair, or incapable of recognizing their genius. Pay attention to fixation and escalation.
Pro tip Offer legitimate channels for appeal and support before grievances harden.
Watch out Employees can have valid complaints; investigate the organization as well as the individual.
- 4
Combine behavior with opportunity
Review whether the concerning pattern coincides with unnecessary access, unusual information gathering, policy violations, or unexplained boundary testing.
Pro tip Apply least-privilege access controls universally rather than targeting one person informally.
Watch out Never infer betrayal from personality traits without corroborating conduct.
- 5
Intervene proportionately
Use coaching, access adjustment, professional security review, or formal investigation according to the evidence. Document decisions and preserve due process.
Pro tip Address both personnel welfare and organizational security.
Watch out Public accusations can harm innocent people and compromise a legitimate investigation.
In the wild
An analyst repeatedly claims to be the unit's strongest performer while missing deadlines and rejecting feedback. After being passed over for promotion, the analyst becomes fixated on institutional betrayal and begins accessing files outside current assignments. Management treats the combination—not any single trait—as grounds for a lawful access review and support intervention.
→ Unnecessary access is restricted and the concerning behavior is assessed before sensitive information is lost.
Devine points to Rick Ames and Robert Hanssen as people who saw themselves as unusually intelligent while becoming alienated from institutions that did not reward them as expected. Their personal grievances mattered more than a simple ideological explanation.
→ The comparison produces a more behaviorally specific search profile for potential insider threats.
Common mistakes
Profiling one personality trait
Ego, laziness, resentment, or career disappointment alone cannot establish malicious intent; the framework depends on convergence and corroborating behavior.
Ignoring legitimate grievances
Treating every complaint as disloyalty prevents leaders from identifying real organizational failures and may deepen alienation.
Replacing controls with intuition
Behavioral judgment should complement least privilege, auditing, and due process rather than substitute for them.
Is it for you?
Best for
Managers and counterintelligence teams responsible for personnel with access to sensitive systems or information.
Not ideal for
Untrained managers seeking to label difficult employees without evidence, due process, or professional assessment.
From the transcript
“They think they're really smart, smarter than everybody else.”
“But they are all so lazy.”
“look for the person and had a huge ego and it's delusional about themselves and are underperforming. That's where I would go hunting for spies.”
From the episode
Jack Devine on the Afghan War’s Financial Disaster (Podcast)
Jack Devine