Insider Threat

Chapter 1: Introduction - A Leader's Guide Chapter 2: Challenges to Mature an Insider Threat Program Chapter 3: From Bricks and Mortar to Bits and Bytes Chapter 4: Identifying Functional Ownership, Establishing the ITWG, and Developing CONOPs for Programmatic Success Chapter 5: Identifying Critical Indicators in Organizational Data Chapter 6: Establishing an Organizational Risk Appetite Chapter 7: Risk Management Using Data Analytics Chapter 8: Information Security and Technology Integration Chapter 9: Cyber Security and Insider Threat Mitigation Chapter 10: Vendor Analysis and Supply Chain Risk Mitigation Chapter 11: Employee Engagement: Critical to Mitigating the Risk of Insider Threat Chapter 12: Workplace Violence and Insider Threat Chapter 13: Monitoring and Investigating Chapter 14: Privacy and Data Considerations When Developing an Insider Threat Program Chapter 15: What the Future Holds Appendices Appendix A: What data is needed to proactively identify potential insiders? Appendix B: Potential Risk Indicators Appendix C: How do I position an insider threat program to my workforce? Appendix D: What are the skill sets that a leading program needs to have? Appendix E: What capabilities differentiate an industry-leading program? Appendix F: Insider Threat Program Governance Structure Appendix G: Business Assurance/Insider Threat Working Group Charter Appendix H: How Do I Assess The Maturity of My Insider Threat Program? Appendix I: Business Rule Development Appendix J: How Do I Address Insider Threat From A Policy And Training Perspective? Appendix K: Use Case: E-Mail Exfiltration Appendix L: FAQs