CISA Releases New Guidance on Assembling Multi-Disciplinary Insider Threat Management Teams

CISA published guidance for assembling a multi-disciplinary insider threat management team using the POEM framework (Plan, Organize, Execute, Maintain), advising organizations to define team purpose and scope, identify critical assets, foster reporting culture, integrate training and analysis, consult legal counsel, and sustain the program through ongoing training and policy updates; while targeted at critical infrastructure, the recommendations are broadly applicable.