# Insider Threat Assessment

> From $35K · Specialized & Industry · https://cisomarketplace.services/services/insider-threat-assessment

Comprehensive evaluation of your organization's ability to prevent, detect, and respond to threats originating from within. Our assessment examines technical controls, behavioral indicators, access management, and organizational culture to identify and mitigate insider risks.

## In scope

- Privileged access review
- Data loss prevention assessment
- User behavior analytics evaluation
- Authorization control review
- Separation of duties analysis
- Logging and monitoring capabilities
- Insider threat program evaluation
- HR policy review

## Deliverables

- Insider risk assessment report
- Control gap analysis
- Insider threat program roadmap
- Behavioral indicator framework
- Technical control recommendations
- Policy enhancement guide
- Insider threat detection playbook

## Tiers

### Essential Insider Risk Assessment: $35K

Insider risk assessment for up to 500 employees: privileged access review, authorization and separation-of-duties analysis for up to 3 critical systems, logging and monitoring capability review, HR policy review, and a control gap report.

Limits: employees 500

Includes:
- Privileged access review
- Authorization and separation-of-duties analysis for up to 3 critical systems
- Logging and monitoring capability review
- HR and offboarding policy review
- Insider risk assessment report and control gap analysis

Excludes:
- DLP and user behavior analytics evaluation
- Insider threat program design
- Detection playbook
- Culture assessment

### Comprehensive Insider Threat Program: $60K

Insider risk assessment for up to 2,500 employees and up to 10 critical systems. Adds DLP assessment, user behavior analytics evaluation, existing program evaluation, behavioral indicator framework, program roadmap, and a detection playbook.

Limits: employees 2500

Includes:
- Everything in the Essential tier, for up to 10 critical systems
- Data loss prevention assessment
- User behavior analytics evaluation
- Behavioral indicator framework
- Insider threat program roadmap
- Insider threat detection playbook

Excludes:
- Custom analytics and detection rule development
- Integration of monitoring tools
- Organizational culture assessment

### Enterprise Insider Risk Management: $95K

No fixed headcount cap - scoped to the organization. Adds custom detection analytics (up to 15 use cases) in the client's SIEM/UBA, integration of HR, access and DLP signals into monitoring, and an organizational culture assessment with staff interviews.

Includes:
- Everything in the Comprehensive tier
- Up to 15 custom insider detection use cases built in the client's tooling
- Integration design for HR, identity and DLP signals
- Organizational culture assessment with surveys and interviews
- Governance model with legal, HR and security roles

Excludes:
- Monitoring tool licences
- Ongoing insider threat analyst staffing
- Individual employee investigations

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=insider-threat-assessment