GRC Keamanan Siber 13 butir
Insider Threat Program Assessment
Daftar periksa ini dalam bahasa Inggris.
Assesses an insider threat program covering governance, risk indicators, monitoring and analytics, response, and privacy safeguards.
NIST 800-53CERT Insider ThreatCISA
PDF atau Word gratis · masukkan email Anda untuk mengunduh.
Program Governance
- Is there a formally chartered insider threat program with executive sponsorship? *
- Does the program include a cross-functional working group (security, HR, legal, privacy)? *
- Are roles, escalation paths, and decision authority documented? *
- Is the program reviewed against legal and privacy requirements before monitoring? *
Risk Indicators
- Are technical risk indicators (mass downloads, unusual access, use of removable media) defined? *
- Are behavioral/HR indicators (policy violations, performance issues) integrated where appropriate?
- Are high-risk populations (departing employees, privileged users) given heightened monitoring? *
Monitoring & Analytics
- Is user and entity behavior analytics (UEBA) deployed to baseline and flag anomalies? *
- Is data loss prevention deployed across endpoints, email, and cloud? *
- Are privileged user activities logged and reviewed? *
Response & Privacy
- Is there a defined, legally reviewed process for investigating potential insider incidents? *
- Are least-privilege and separation-of-duties controls used to reduce insider opportunity? *
- Are monitoring practices proportionate, with employee notice and privacy safeguards documented? *
Unduh daftar periksa Insider Threat Program Assessment lengkap
Dapatkan secara gratis sebagai PDF yang rapi dan siap cetak atau dokumen Word yang dapat diedit.