ITM is an open framework - Submit your contributions now.

Insider Threat Matrix™

  • ID: ME021.002
  • Created: 19th June 2024
  • Updated: 24th July 2024
  • Contributor: The ITM Team

Web Service Credentials

Web credentials that were available to the subject during employment are not revoked and can still be used.

Prevention

ID Name Description
PV023Access Reviews

Routine reviews of user accounts and their associated privileges and permissions should be conducted to identify overly-permissive accounts, or accounts that are no longer required to be active.

PV024Employee Off-boarding Process

When an employee leaves the organization, a formal process should be followed to ensure all equipment is returned, and any associated accounts or access is revoked.