topic Internal Threat Control Framework in Governance, Risk, Compliance

Internal Threat Control Framework

thecloseman — Fri, 18 Nov 2022 00:03:53 GMT

Hi all,

I would like to do an assessment on our control environment to mitigate risk associated with insider threats.

Can someone recommend a control framework to use for this or have a template they are willing to share?

Thanks

dcontesti — Fri, 18 Nov 2022 02:52:41 GMT

Not knowing your industry, I might suggest that you start with the following resources:

Lots of information that will hopefully assist you.

mtwining86 — Sun, 20 Nov 2022 08:30:37 GMT

dcontesti pointed to what I would consider an excellent resource from CISA.

The below I found useful, but the 'meat and potatoes', so to speak, can be found starting on page 28 I believe.