GTAG 21 - Auditing Insider Threat Programs

GTAG 21 - Auditing Insider Threat Programs

Executive Summary

In the digital era, organizations must treat data the same way they would treat cash: as an organizational asset that must be protected from insiders and outsiders alike. Protecting the organization’s digital assets from catastrophic data breaches should no longer be viewed as the responsibility of information technology (IT) management only. Senior management and the board are ultimately accountable for managing the organization’s risks to levels that enable the organization to achieve its objectives.