This report contains the purposes and design of models of insider behaviour and recommendations for helping to prevent, discover and mitigate the threat of insider misuse of information systems. The text is based on a August 2000 workshop on the topic of R&D initiatives.