Platform
Modules
By sector
By sector
By standard
Blog
News
Events
ATP-3.16.1
NATO operational and tactical commanders and staff conducting security force assistance operations, not suppliers or contractors
ATP-3.16.1 is NATO's Allied Tactical Publication giving operational and tactical commanders a framework for countering insider threats, agreed by nations under STANAG 6513, not a requirement placed on a supplier.
ATP-3.16.1, "Countering Insider Threats (CIT)", is NATO's Allied Tactical Publication on the insider-threat problem in security force assistance and similar operations: attacks on NATO forces carried out, or made possible, by someone in a position of trust with a host nation's security forces. Its own purpose clause is direct about what it is for: "to provide a useful framework to understand, prevent, and counter insider threats and insider acts of violence during Allied joint operations." It is written for NATO itself, not for a company: the publication guides how operational and tactical commanders and staff think about, prepare for, and respond to this problem, not what a supplier delivers or documents.
The preface states that the publication "is intended to guide operational and tactical commanders and staff." Nowhere does the text name a supplier, manufacturer, acquirer or any other commercial role, and it defines no contract mechanism. It binds through STANAG 6513: "The agreement of nations to use this publication is recorded in STANAG 6513." A nation ratifies the STANAG, sometimes with formal reservations recorded against specific paragraphs, and then applies ATP-3.16.1 through its own military chain of command, not through a customer contract reaching a contractor's quality system. Edition A, Version 1 was promulgated in April 2016 and "is effective upon receipt", with no earlier edition superseded.
Within NATO's doctrine hierarchy, ATP-3.16.1 is "directly subordinate to AJP-3.16, Allied Joint Doctrine for Security Force Assistance," and is meant to be read alongside AJP-3.14, Allied Joint Doctrine for Force Protection, named as forming "the cornerstone of NATO force protection doctrine."
The publication runs two chapters, an annex, a lexicon and a reference list. Chapter 1 sets out the fundamentals: definitions of an "insider", an "insider threat" and an "insider attack" that apply only within this publication, an account of why cultural friction between NATO forces and host-nation security forces has featured in past insider attacks, a small number of broad categories the document uses to group possible causation, and a relationship-based prevention model built on qualities such as patience, reliability, communication, partnership and trust between advisors and their host-nation counterparts rather than on a technical control.
Chapter 2 works through a six-function conceptual framework, "prepare, deter, detect, respond, recover and exploit," spanning the period before, during and after an insider-threat incident while conducting security force assistance operations, and Annex A supplies further illustrative material on the same theme. That material is written to guide NATO commanders and staff in their own conduct of operations; this page does not restate it, and the lexicon and reference list that close the publication fix its own terms, acronyms and the wider NATO doctrine it draws on.
Nobody assesses a commander, a unit or a supplier against ATP-3.16.1 through a certification, an audit or a contractual conformity scheme; the document names none. It is doctrine for a military chain of command, applied through judgement and training rather than checked by an external party.
ATP-3.16.1 places no requirement on a supplier, and there is no meaningful sense in which ComplyTrain helps an organisation "comply" with it: the document guides NATO commanders and staff in their own conduct of operations, not a company's management system. Where it becomes relevant to a defence supplier is indirect and occasional: personnel a company embeds with or seconds to a NATO force under a contract may be required to complete briefing or training that references doctrine such as ATP-3.16.1, and ComplyTrain can hold that as a documented training record, the same way it holds evidence of any other internally required training, without ComplyTrain itself defining, teaching or assessing the operational content.
What ComplyTrain does not do: it does not define, teach or assess counter-insider-threat measures, and it makes no claim that a supplier or its personnel are assessed against this publication, because the document names no such assessment for anyone outside NATO's own chain of command. Which parts of NATO doctrine, if any, a specific contract requires personnel to be briefed on are set by the contract and the customer's own quality and security clauses, not by this page. The standards explorer shows what else sits alongside ATP-3.16.1 in the catalogue, and we are glad to talk through what a specific contract requires.
Tell us how you need to work with ATP-3.16.1 and what you need from it. We will come back to you about what ComplyTrain can do.
Thank you. Your list is on its way to your inbox, and we will come back to you on what working with these standards in ComplyTrain involves, usually within one business day.
No. ATP-3.16.1 guides NATO operational and tactical commanders and staff in countering insider threats during operations; it names no supplier, contractor or product requirement anywhere in the text. A supplier's obligations come from the specific contract or tasking that applies to their work, not from this doctrine publication.
STANAG 6513 is the covering agreement. As NATO's Letter of Promulgation states, "The agreement of nations to use this publication is recorded in STANAG 6513." ATP-3.16.1 is the Allied Publication STANAG 6513 covers, and a nation is bound to use it once that nation has ratified the STANAG, sometimes with reservations recorded against particular paragraphs.
AJP-3.16, Allied Joint Doctrine for Security Force Assistance, sets out the fundamentals of security force assistance at the joint level. ATP-3.16.1 sits beneath it in NATO's doctrine hierarchy and is "directly subordinate to AJP-3.16," narrowing that doctrine down to the specific, tactical-level problem of countering insider threats.
No. The document describes no accreditation, audit or certification scheme, and names no certification body, notified body or customer auditor. It is applied through a military chain of command's own judgement and training, not checked by an external party.
No. STANAG 6513 is the short agreement by which nations commit to use ATP-3.16.1; ATP-3.16.1 is the Allied Tactical Publication itself, the document that sets out the framework for countering insider threats.
One system for the whole compliance programme. Start with the module you need most.
Collect information the same way every time, and decide in advance what happens next.
Know whether your controls are operating, not just whether a policy says they exist.
Turn the compliance work you already know about into a plan with owners, dependencies and dates.
Know what you can offer, and hold the evidence behind every configuration you offer it in.
Eight built-in reports across every module, scheduled, delivered, and filed where the evidence lives.
The sector news that matters to your organisation - read and rated by AI, and delivered as a scheduled digest in your own language.
AI reads the tender pack and pulls out the requirements, deadlines and rules - then helps you draft the response from your own approved content, with you reviewing every step.
One current register of the suppliers and partners you depend on - each risk-assessed, re-assessing itself on schedule, and wired straight into your risk register.
See every requirement you face - across every standard, plus your own contracts and policies - traced to the documents, evidence and processes that satisfy it.
Identify, score, treat and review your risks in one place - with AI to help anyone run a proper assessment, and a defensible trail behind every decision.
Assign training, prove it was understood, and hold the competence records an auditor asks for.
Draft compliance documents with AI, keep every version under control, and export them beautifully branded - all in one place.
Audits, corrective actions, processes and approvals in one quality system, organised around ISO 9001.
Medical device manufacturers operate under more regulatory pressure than almost any other sector outside pharmaceuticals. The rules govern how you design a device, how you make it, how you track it after it ships, and how you respond when something goes wrong.
Learn how EU dual-use export controls apply to encryption, sensors, and software, how classification works under Annex I, and why sending source code by email can count as an export.
A practical way to turn in-your-head risk management into a register that survives staff turnover and answers the risk questions now showing up in tenders.