KR eCampusCourses coming soon

KR ECAMPUS

Choose your country

Select your country to switch to the right eCampus site.

My eCampus

Back to courses

Advanced · Self-paced learning

Insider Risk: Designing Prevention and Escalation

Inquiry This course is not yet bookable.

One person can change supplier data and authorise payments alone. Examine how to prevent an unauthorised change followed by payment.

Compare separation of duties and sample checks with continuous individual monitoring in terms of effect, effort and fairness. Follow a data change through to payment approval and add a deputy if the second approver is unavailable. Also specify who receives, assesses and, where needed, escalates concerns. A concern alone is not proof of misconduct.

Develop your protection and escalation procedure further for your own area. Real investigations and the legality of individual measures, including privacy and consultation requirements, require separate assessment.

What you will work on

  • You define insider risks for specified assets and roles and justify the threat assumptions you use.
  • You set prevention, reporting and escalation routes with decision rights for security, HR and compliance.
  • You review the risk of one person being able to change supplier data and approve payments.

Who it is for

  • Security and risk managers
  • HR managers
  • Compliance officers

Topics

  • Assets, roles and insider risk scenarios
  • Risk-based prevention: access, segregation of duties, awareness and controls
  • Reporting routes, confidentiality and fair treatment of concerns
  • Escalation, investigation boundaries and work with legal, HR and forensics
  • Monitoring limits, proportionality and local consultation requirements
  • Programme control: indicators, learning from cases and revision

Your result

Your insider-risk procedure covers report intake, separation of duties, sampling and information limits. Adapt it for your area.

Prerequisites

Basic knowledge of security, HR or compliance processes and access to approved role and policy information. A case study is available; participants need not disclose real suspected cases.

Format and approach

Planned: 5–6 hours of self-study, with templates, case work and self-checks.

Planned learning time: 5–6 hours

Enquire about this course

Advanced · Self-paced learning

Managing Executive Protection Services

A delegation trip requires continuous local protection and a contact who is available at all times. One provider offers references and extra technology but cannot commit to local support. Assess proposals against mandatory services first.

Read the description

Advanced · Self-paced learning

Managing an Information Security Programme

Plan the annual information security programme for your area: which objectives and risks come first, and what actions and resources are needed? A management review template helps you present the decisions and supporting evidence to leadership.

Read the description