Index / Programme design

Programme design

Governance, legal constraints, staffing and the questions to settle before deployment.

• ProcedureProgrammeStanding Up an Insider Risk Programme: The First Ninety DaysThe sequence that works, and why buying the tool first is the most common way to fail.
• ReferenceLegalGovernance: Who Decides, Who Investigates, Who Sees WhatThe structural questions that determine whether a programme is trusted or resented, settled befo
• ReferenceLegalLegal and Privacy Constraints on Employee MonitoringMonitoring employees is a regulated activity in much of the world. The obligations that most com
• ProcedurePeopleWorking With HR and LegalThe relationships that determine whether findings lead to outcomes or sit in a queue.
• ReferenceAssuranceMetrics That Mean SomethingAlert counts and blocked events are the standard reporting and both are misleading. What to repo
• ReferenceIdentityPrivileged Users and AdministratorsThe smallest population, the highest consequence, and the one that can most easily obscure its o
• ReferencePeopleStaffing an Insider Risk FunctionThe roles a working programme needs, what one person can realistically cover, and where organisa
• ReferencePeopleAwareness That Actually Changes BehaviourAnnual training does not reduce incidents. The interventions that do are smaller, closer to the
• ReferenceSupply chainContractors, Third Parties and Supply Chain InsidersPeople with insider access who are outside your HR processes, your training, and usually your de