cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
thecloseman
Newcomer I

Internal Threat Control Framework

Hi all,

 

I would like to do an assessment on our control environment to mitigate risk associated with insider threats. 

 

Can someone recommend a control framework to use for this or have a template they are willing to share?

 

Thanks 

2 Replies
dcontesti
Community Champion

Not knowing your industry, I might suggest that you start with the following resources:

 

https://www.cisa.gov/sites/default/files/publications/fact-sheet-insider-threat-mitigation-program-0...

 

https://www.cisa.gov/insider-threat-mitigation

 

Lots of information that will hopefully assist you.

 

d

 

mtwining86
Newcomer I

dcontesti pointed to what I would consider an excellent resource from CISA.

The below I found useful, but the 'meat and potatoes', so to speak, can be found starting on page 28 I believe.

https://www.cisa.gov/sites/default/files/publications/Insider%20Threat%20Mitigation%20Guide_Final_50...