Insider Threat Management and User Activity Monitoring
Department of Justice · Department of Justice / EOUSA
Overview
- Development stage
- DeployedSource: c) Deployed – The use case is being actively authorized or utilized to support the functions or mission of an agency.
- High-impact designation
- High-impactSource: a) High-impact
- Impact justification
- Not reported
- Start date
- 2025-06 (month precision)Source: 06/2025
- Withheld from public reporting
- NoSource: a) No
Mission
- Topic area
- Law Enforcement
- Operational functions
- Forecasting and prediction Derived by keyword rules; see methodology
Problem the AI is intended to solve
Identification and prevention of anomalous user behavior too subtle for human detection and analysis
Expected benefits
Usage of this system proactively identifies and prevents costly data breaches, reducing incident response time, and gives EOUSA and the USAO comprehensive insight of user behavior to maintain security and compliance
System outputs
Analytics and predictive models
Technology
- AI classification
- Generative AISource: Generative AI: AI that generates new or synthetic content (e.g., images, videos, audio, text, code).
- System name(s)
- Redacted for cybersecurity purposes.
- Custom-developed code
- No
- Public source code
- Not reported
Sourcing
- How it was built
- Purchased from vendorSource: a) Purchased from a vendor
- Vendor (as reported)
- Not reported
- Vendors (standardized)
- None on the standard list
A vendor is the supplier named by the agency. It does not identify the underlying model or AI technology.
Data and privacy
- Involves PII
- Yes
- Privacy Impact Assessment
- Not reported
- Authorization to Operate
- No
- Demographic features
- k) None of the above
- Training and evaluation data
- The case owner relied on DOJ AI governance practices to select and prepare data, as well as evaluate performance.
- Federal Data Catalog
- Not reported
Governance
8 of 8 minimum-practice questions answered. A blank answer means the agency reported nothing; it does not mean the practice is absent.
Potential impacts and how they were identified
Consistent with Executive Orders and OMB guidance, the case owner relied on DOJ AI governance practices to evaluate impacts and risks.