We've seen the scary stats and know the trends - insiders cause 60% of breaches, the great resignation, accelerating digital transformation and remote work. Sure, Insider Risk Management is important - but what is it, really?   For some, it's a shiny re-branding of DLP. For others, it's addressing compromised user accounts. Now we're seeing "holistic IRM" that prioritizes addressing systemic, organizational issues that lead to insider threats over the bad behavior itself.   The noise does not help you - the person trying to address insider threats - advocate for and design a sensible program. During this presentation, we cut through the platitudes and describe a structured method to scope and build a program that fits your organization. Topics covered: - Insider risk management reference architecture - Inputs for scoping your program - Using MITRE for insider threats - Building your roadmap - From zero to one – gaining traction for a new program.

Session Objectives: Learn how to scope an insider risk management program based on what your organization needs, not previous experience or biases, how to use MITRE to comprehensively account for insider threat activities, and how to gain support and funding for Insider Risk Management Initiatives.