simpl.
Connexion
GRC Cybersécurité 13 points

Insider Threat Program Assessment

Cette liste de contrôle est en anglais.

Assesses an insider threat program covering governance, risk indicators, monitoring and analytics, response, and privacy safeguards.

NIST 800-53CERT Insider ThreatCISA

PDF ou Word gratuit · saisissez votre e-mail pour le télécharger.

Program Governance

  • Is there a formally chartered insider threat program with executive sponsorship? *
  • Does the program include a cross-functional working group (security, HR, legal, privacy)? *
  • Are roles, escalation paths, and decision authority documented? *
  • Is the program reviewed against legal and privacy requirements before monitoring? *

Risk Indicators

  • Are technical risk indicators (mass downloads, unusual access, use of removable media) defined? *
  • Are behavioral/HR indicators (policy violations, performance issues) integrated where appropriate?
  • Are high-risk populations (departing employees, privileged users) given heightened monitoring? *

Monitoring & Analytics

  • Is user and entity behavior analytics (UEBA) deployed to baseline and flag anomalies? *
  • Is data loss prevention deployed across endpoints, email, and cloud? *
  • Are privileged user activities logged and reviewed? *

Response & Privacy

  • Is there a defined, legally reviewed process for investigating potential insider incidents? *
  • Are least-privilege and separation-of-duties controls used to reduce insider opportunity? *
  • Are monitoring practices proportionate, with employee notice and privacy safeguards documented? *

Téléchargez la liste de contrôle Insider Threat Program Assessment complète

Obtenez-la gratuitement en PDF propre et imprimable, ou en document Word modifiable.