Assessment Objective
Determine if:
- PM-12 an insider threat program that includes a cross-discipline insider threat incident handling team is implemented.
Assessment Methods
Interview
- Organizational personnel with information security and privacy program planning and plan implementation responsibilities
- organizational personnel responsible for the insider threat program
- members of the cross-discipline insider threat incident handling team
- legal counsel
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for implementing the insider threat program and the cross-discipline insider threat incident handling team
- mechanisms supporting and/or implementing the insider threat program and the cross-discipline insider threat incident handling team
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | PM-12 Insider Threat Program |