Insider Threat Leading Practices

Misuse of authorized access to an organization’s critical assets is a significant and complex threat that requires a coordinated, proactive, enterprisewide effort to sufficiently address. This tool is designed to assist auditors in preparing an audit program for insider threats.

Additional resources to use with this IIA Audit Tool

Auditing Insider Threat Programs
Insider Threat Assessment Using NIST Cybersecurity Framework