Risk assessment

Insider threat risk assessments are performed on a regular basis (i.e. at least every 2 years) and any gaps and weaknesses identified are addressed