GRC de ciberseguridad 13 elementos
Insider Threat Program Assessment
Esta lista de verificación está en inglés.
Assesses an insider threat program covering governance, risk indicators, monitoring and analytics, response, and privacy safeguards.
NIST 800-53CERT Insider ThreatCISA
PDF o Word gratuito · introduzca su correo electrónico para descargar.
Program Governance
- Is there a formally chartered insider threat program with executive sponsorship? *
- Does the program include a cross-functional working group (security, HR, legal, privacy)? *
- Are roles, escalation paths, and decision authority documented? *
- Is the program reviewed against legal and privacy requirements before monitoring? *
Risk Indicators
- Are technical risk indicators (mass downloads, unusual access, use of removable media) defined? *
- Are behavioral/HR indicators (policy violations, performance issues) integrated where appropriate?
- Are high-risk populations (departing employees, privileged users) given heightened monitoring? *
Monitoring & Analytics
- Is user and entity behavior analytics (UEBA) deployed to baseline and flag anomalies? *
- Is data loss prevention deployed across endpoints, email, and cloud? *
- Are privileged user activities logged and reviewed? *
Response & Privacy
- Is there a defined, legally reviewed process for investigating potential insider incidents? *
- Are least-privilege and separation-of-duties controls used to reduce insider opportunity? *
- Are monitoring practices proportionate, with employee notice and privacy safeguards documented? *
Descargue la lista de verificación Insider Threat Program Assessment completa
Obténgala gratis como PDF limpio e imprimible o como documento de Word editable.