Summary

The best practices presented in this chapter provide a framework for establishing an insider threat program in your organization. Start by including insider threats in your enterprise-wide risk assessment. Next, conduct a security awareness campaign to ensure that insider threat is understood across your organization so that responsibility for the identification of and response to insiders who pose an elevated risk can be distributed enterprise-wide. Develop clearly defined policies, as described throughout this chapter, and enforce them consistently and fairly. Management needs to understand how to recognize and respond to concerning behavior in the workplace, and needs to understand the potential ramifications of negative workplace event....