Conclusion
Insider-Threat Programs Are Not Static
Like most processes, an insider-threat program is never complete. Not only will the program change as the company develops more maturity in security processes and knowledge, but threats, regulations, and technologies change over time, requiring re-evaluation of how those factors could impact the program.
For more information on how to get started with an insider-threat program, or how to improve an existing program