They do by default, but if they bitch they get exceptions. Because they are in charge.
Everyone inside your company is an insider threat. Just like everyone outside of it is an outside threat. The point is to ID/flag people who are are disproportionately more risky than the baseline standard of risk. The FedEx guy making regular deliveries isn’t a flag, but if if he shows up at 2am and hangs out for an hour, yeah that’s weird and you should investigate that.
They do by default, but if they bitch they get exceptions. Because they are in charge.
Everyone inside your company is an insider threat. Just like everyone outside of it is an outside threat. The point is to ID/flag people who are are disproportionately more risky than the baseline standard of risk. The FedEx guy making regular deliveries isn’t a flag, but if if he shows up at 2am and hangs out for an hour, yeah that’s weird and you should investigate that.