; (C) document insider threat policies and controls; (D) conduct a baseline risk assessment of insider threats posed to the Department’s critical assets; (E) examine existing programmatic and technology best practices adopted by the Federal Government, industry, and research institutions to implement solutions that are validated and cost-effective; (F) develop a timeline for deploying workplace monitoring technologies, employee awareness campaigns, and education and training programs related to identifying, preventing, mitigating, and responding to potential insider threats to the Department’s critical assets; (G) require the Chair and Vice Chair of the Steering Committee to consult with the Under Secretary for Science and Technology and other appropriate stakeholders to ensure the Insider Threat Program is informed, on an ongoing basis, by current information regarding threats, beset practices, and available technology; and (H) develop, collect, and report metrics on the effectiveness of the Department’s insider threat mitigation efforts. (c) Definitions In this section: (1) Critical assets The term critical assets means the people, facilities, information, and technology required for the Department to fulfill its mission. (2) Insider The term insider means— (A) any person who has access to classified national security information and is employed by, detailed to, or assigned to the Department, including members of the Armed Forces, experts or consultants to the Department, industrial or commercial contractors, licensees, certificate holders, or grantees of the Department, including all subcontractors, personal services contractors, or any other category of person who acts for or on behalf of the Department, as determined by the Secretary