网络安全 GRC 13 项
Insider Threat Program Assessment
此检查清单为英文版。
Assesses an insider threat program covering governance, risk indicators, monitoring and analytics, response, and privacy safeguards.
NIST 800-53CERT Insider ThreatCISA
免费 PDF 或 Word · 输入邮箱即可下载。
Program Governance
- Is there a formally chartered insider threat program with executive sponsorship? *
- Does the program include a cross-functional working group (security, HR, legal, privacy)? *
- Are roles, escalation paths, and decision authority documented? *
- Is the program reviewed against legal and privacy requirements before monitoring? *
Risk Indicators
- Are technical risk indicators (mass downloads, unusual access, use of removable media) defined? *
- Are behavioral/HR indicators (policy violations, performance issues) integrated where appropriate?
- Are high-risk populations (departing employees, privileged users) given heightened monitoring? *
Monitoring & Analytics
- Is user and entity behavior analytics (UEBA) deployed to baseline and flag anomalies? *
- Is data loss prevention deployed across endpoints, email, and cloud? *
- Are privileged user activities logged and reviewed? *
Response & Privacy
- Is there a defined, legally reviewed process for investigating potential insider incidents? *
- Are least-privilege and separation-of-duties controls used to reduce insider opportunity? *
- Are monitoring practices proportionate, with employee notice and privacy safeguards documented? *
下载完整的Insider Threat Program Assessment检查清单
免费获取排版清晰、便于打印的 PDF，或可编辑的 Word 文档。