Webinar

Stuck at Level Three: Phil Venables on Climbing the Insider Risk Maturity Model

Thursday, November 12th | 1 PM EST
Join Phil Venables, former CISO of Google Cloud and Board Member at Above Security, for a live conversation on what a modern insider risk program should look like.

Using his Insider Risk Maturity Model paper, Phil will walk through the five capability levels, from data control to organizational risk intelligence, and share honest commentary on why most programs stall at Level Three.
Above is trusted by enterprises protecting sensitive data, IP, and complex workforce environments

Why attend this session

Many organizations believe they have a handle on insider risk until they find out they were wrong the hard way. Adding tools and signals rarely moves a program forward - investigations are what catapults a program into maturity.

The insider landscape continues to change rapidly thanks to AI. The speed and scale is unprecedented, and organizations can easily fall behind if their programs aren't built for the future. Flagging anomalies isn't enough, you need to be able to deliver verdicts based on context and have the evidence to back it up.

Phil's guide to building an insider risk program

A practical blueprint, co-authored by Phil Venables
Download the guide
A program charter
Scope, mandate, and who signs off.
An operating model
Security, HR, and legal in one workflow.
wiiwiw
A detection strategy
The signals that matter, without mass surveillance.
A privacy posture
Employee trust treated as a design constraint.
Defensible evidence
Cases that hold up with HR and legal.
Board-ready metrics
Proof of risk reduction, not alert counts.
wiiwiw
Download the guide

An insider risk program is not a tool you buy. It is a discipline you build, and most of the work is organizational rather than technical.

The programs that last decide up front who owns a case, what evidence is fair to collect, and how they prove to their own people that this is not surveillance.

Phil Venables
Phil Venables

Cybersecurity leader, Partner at Ballistic Ventures, and former CISO, Google Cloud

Partner, Ballistic Ventures

Every endgame starts with the right opening.

Most insider threats are preventable.
The difference is how you develop your material.
Ready to make your move?
Schedule demo
Most insider threats are preventable.
The difference is how you develop your material.
ISO 42001
PlatformReal-time GuidanceAI Investigative AgentsInvestigation workspace & case managementIntegrations
SolutionsPre-departureAgentic AICustom GPTPersonal AICredential LeaksMalicious Insider
ResourcesWhite PapersBlogAbove in MediaEventsAbove TheoryInsider Threat MatrixSynthetic Insider Threat Matrix
Use CasesSecurity teamsLegal teamsHR teams
CompanyAbout UsCareersPartners
Chess Game
Contact Us
Copyright © 2026, Above. All Rights Reserved.Privacy Policy

Contact us

You've made a great move.
We'll be in touch shortly

Close
Close ×

Every endgame starts with the right opening.

Most insider threats are preventable.
The difference is how you develop your material.
Ready to make your move?
Schedule demo