Building an Insider Risk Program

The vendor-neutral guide to building an insider risk program: a five-level maturity model with a one-minute diagnostic, a business case finance will fund, and an RFP framework to evaluate vendors on the merits.

Co-authored by

Phil Venables

Former CISO of Google Cloud and Goldman Sachs · Partner, Ballistic Ventures

“Insider risk is fundamentally an investigation problem, not simply a policy problem. Static rules can't keep pace with how people and agents actually work. Understanding intent can.”

What's inside

• ▸A five-level Insider Risk Maturity Model and a one-minute self-diagnostic
• ▸A business case with public benchmarks and an interactive ROI worksheet
• ▸A vendor-neutral RFP framework and a weighted scorecard
• ▸A phased 90-day plan to stand up or level up your program