حوكمة ومخاطر وامتثال الأمن السيبراني (GRC) 13 بند
Insider Threat Program Assessment
قائمة التحقق هذه باللغة الإنجليزية.
Assesses an insider threat program covering governance, risk indicators, monitoring and analytics, response, and privacy safeguards.
NIST 800-53CERT Insider ThreatCISA
PDF أو Word مجانًا · أدخل بريدك الإلكتروني للتنزيل.
Program Governance
- Is there a formally chartered insider threat program with executive sponsorship? *
- Does the program include a cross-functional working group (security, HR, legal, privacy)? *
- Are roles, escalation paths, and decision authority documented? *
- Is the program reviewed against legal and privacy requirements before monitoring? *
Risk Indicators
- Are technical risk indicators (mass downloads, unusual access, use of removable media) defined? *
- Are behavioral/HR indicators (policy violations, performance issues) integrated where appropriate?
- Are high-risk populations (departing employees, privileged users) given heightened monitoring? *
Monitoring & Analytics
- Is user and entity behavior analytics (UEBA) deployed to baseline and flag anomalies? *
- Is data loss prevention deployed across endpoints, email, and cloud? *
- Are privileged user activities logged and reviewed? *
Response & Privacy
- Is there a defined, legally reviewed process for investigating potential insider incidents? *
- Are least-privilege and separation-of-duties controls used to reduce insider opportunity? *
- Are monitoring practices proportionate, with employee notice and privacy safeguards documented? *
نزّل قائمة تحقق Insider Threat Program Assessment كاملة
احصل عليها مجانًا بصيغة PDF أنيقة قابلة للطباعة أو مستند Word قابل للتعديل.