Internal Threat Control Framework

[thecloseman]

Hi all,

I would like to do an assessment on our control environment to mitigate risk associated with insider threats. 

Can someone recommend a control framework to use for this or have a template they are willing to share?

Thanks 

[dcontesti]

Not knowing your industry, I might suggest that you start with the following resources:

https://www.cisa.gov/sites/default/files/publications/fact-sheet-insider-threat-mitigation-program-0...

https://www.cisa.gov/insider-threat-mitigation

Lots of information that will hopefully assist you.

d

[mtwining86]

dcontesti pointed to what I would consider an excellent resource from CISA.

The below I found useful, but the 'meat and potatoes', so to speak, can be found starting on page 28 I believe.

https://www.cisa.gov/sites/default/files/publications/Insider%20Threat%20Mitigation%20Guide_Final_50...