Part 3 of four

Insider risk

What the term covers, what detection can and cannot establish, where the law constrains monitoring, and the parts of the problem that are not technical.

For an adjacent operational perspective, how employees can tell if they are being monitored explains the topic in a practical workplace context.

Contents

The six entries

What insider risk actually coversWhat insider risk actually covers. What the requirement says, what it means in practice, and what an assessor will ask.
What detection can and cannot establishWhat detection can and cannot establish. What the requirement says, what it means in practice, and what an assessor will ask.
Monitoring, and where the law constrains itMonitoring, and where the law constrains it. What the requirement says, what it means in practice, and what an assessor will ask.
The fortnight around a departureThe fortnight around a departure. What the requirement says, what it means in practice, and what an assessor will ask.
Privileged access, and who reviews itPrivileged access, and who reviews it. What the requirement says, what it means in practice, and what an assessor will ask.
False positives, and what they costFalse positives, and what they cost. What the requirement says, what it means in practice, and what an assessor will ask.