サイバーセキュリティGRC 13項目
Insider Threat Program Assessment
このチェックリストは英語版です。
Assesses an insider threat program covering governance, risk indicators, monitoring and analytics, response, and privacy safeguards.
NIST 800-53CERT Insider ThreatCISA
無料のPDFまたはWord・メールアドレスを入力してダウンロード。
Program Governance
- Is there a formally chartered insider threat program with executive sponsorship? *
- Does the program include a cross-functional working group (security, HR, legal, privacy)? *
- Are roles, escalation paths, and decision authority documented? *
- Is the program reviewed against legal and privacy requirements before monitoring? *
Risk Indicators
- Are technical risk indicators (mass downloads, unusual access, use of removable media) defined? *
- Are behavioral/HR indicators (policy violations, performance issues) integrated where appropriate?
- Are high-risk populations (departing employees, privileged users) given heightened monitoring? *
Monitoring & Analytics
- Is user and entity behavior analytics (UEBA) deployed to baseline and flag anomalies? *
- Is data loss prevention deployed across endpoints, email, and cloud? *
- Are privileged user activities logged and reviewed? *
Response & Privacy
- Is there a defined, legally reviewed process for investigating potential insider incidents? *
- Are least-privilege and separation-of-duties controls used to reduce insider opportunity? *
- Are monitoring practices proportionate, with employee notice and privacy safeguards documented? *
Insider Threat Program Assessmentチェックリストの完全版をダウンロード
印刷しやすいPDF、または編集可能なWord文書で無料で入手できます。