Establishing an Insider Threat Program in 90 days

About

Most organisations already have many of the components needed to manage insider threats — policies, access controls, security technologies, HR processes, awareness, reporting mechanisms and investigation capabilities.

The challenge is bringing them together into a coherent Insider Threat Program.

Establishing an Insider Threat Program in 90 Days is a practical one-day Masterclass for professionals responsible for establishing or strengthening an insider threat capability within their organisation.

Throughout the day, you will work through what your organisation already has, what may be missing, what matters most, and what needs to be established to prevent, deter, detect and respond to insider threats.

Most importantly, you will develop a practical 90-Day Insider Threat Program Roadmap that you can take back to your organisation and begin putting into action.

The Four Fundamentals

An effective Insider Threat Program brings together four fundamental capabilities:

PREVENT

Reduce the opportunity for insider harm.

DETER

Create clear expectations, accountability and consequences.

DETECT

Identify behaviours and activities that may require attention.

RESPOND

Assess, investigate and act when concerns arise.

PREVENT → DETER → DETECT → RESPOND

Objectives

During the Masterclass, you will work through how to:

• Define the purpose and scope of your Insider Threat Program

• Understand what capabilities already exist across your organisation

• Identify what matters most and where insider harm could have the greatest impact

• Determine what is required to prevent, deter, detect and respond

• Identify the people and functions that need to be involved

• Establish appropriate ownership and governance

• Identify capability gaps and determine what should be prioritised

• Turn those priorities into a practical 90-day strategy and roadmap

  
  

The Masterclass

The day takes you through six practical stages.

1. DEFINE

What are we trying to achieve?

Establish the purpose and scope of your Insider Threat Program and what it needs to achieve for your organisation.

2. UNDERSTAND

What do we already have?

Identify the people, processes, policies, technologies and existing capabilities that already contribute to managing insider threats.

3. PRIORITISE

What matters most?

Identify the people, information, technology, facilities and money that matter most to your organisation, together with high-risk roles, access and areas of potential exposure.

4. ESTABLISH

What capabilities do we need?

Work through what your organisation needs across the four fundamentals:

Prevent | Deter | Detect | Respond

Identify what already exists, where the gaps are and what needs to be strengthened or established.

5. GOVERN

Who needs to be involved?

Determine ownership, stakeholder involvement, accountability, information sharing, escalation and decision-making.

6. PLAN

What happens next?

Bring everything together into a prioritised and achievable 90-Day Insider Threat Program Roadmap.

What Will You Leave With

This is not a day of theory.

Throughout the Masterclass, you will apply the approach to your own organisation and progressively develop a practical 90-Day Insider Threat Program Roadmap.

The Masterclass provides the strategy and structure. The 90 days that follow are about putting that strategy into action within your organisation.

By the end of the day, you will have:

• A defined purpose and scope for your program

• A clearer picture of what your organisation already has

• An initial view of what matters most and where your priorities should lie

• Identified gaps across Prevent, Deter, Detect and Respond

• A view of the stakeholders and governance required

• Priorities for establishing or strengthening your capability

• A practical 30 / 60 / 90-day roadmap

• Clear actions to begin progressing when you return to your organisation

  
  

Who Should Attend

This Masterclass is designed for professionals responsible for establishing, leading or contributing to an organisational insider threat capability, including:

• Security & Cybersecurity Leaders

• Protective Security & Intelligence Professionals

• Insider Threat Leads & Coordinators

• Risk, Governance & Integrity Professionals

• HR & People & Culture Leaders

• Fraud & Investigation Professionals

• Technology & Security Operations Leaders

You do not need an existing Insider Threat Program.

The Masterclass is suitable for organisations starting out and for those seeking to bring existing activities together into a more structured and coordinated capability.

Prerequisite

There is no Prerequisite.

Guarantee

Attend the full day. Participate in the sessions. If by the end you don't feel you have a clear, actionable 90-day plan for your insider threat program, tell me before you leave and I'll refund your full investment. No forms, no hassle.