[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-244222-105":53,"doc-detail-244222-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","security-and-awareness-program-governance-template-irm-program-governance-roles-and-structure","Security and Awareness Program Governance Template - IRM Program Governance Roles and Structure","","Security and Awareness Program Governance Template outlines how to establish effective governance for an Insider Risk Management (IRM) program. It defines key oversight functions, including the organization head, designated senior official or leader, IRM executive council or committee, IRM working group, change control board, insider risk program manager, and optional program liaisons. The template clarifies responsibilities for scope, compliance, annual self-assessments, policy and guidance development, change review, escalation handling, and structured decision documentation to support oversight and mitigate privacy and civil liberty concerns.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":11,"@type":70,"position":76},"https://docshare.wps.com/template/presentations/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/security-and-awareness-program-governance-template-irm-program-governance-roles-and-structure/244222/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/security-and-awareness-program-governance-template-irm-program-governance-roles-and-structure/244222.png","ImageObject",442,249,{"name":88,"@type":89},"Blaney","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-19","2026-09-12",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",10,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"What is the purpose of this governance template for an Insider Risk Management program?","Question",{"text":109,"@type":110},"It enables effective empowerment, oversight, and compliance for an IRM program, confirming adherence to federal and state law and helping address privacy and civil liberty concerns.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"Which internal roles are defined, and what are their core responsibilities?",{"text":114,"@type":110},"The template defines the organization head, designated senior official or leader, IRM executive council/committee, IRM working group, change control board, and insider risk program manager, each with responsibilities spanning scope/budget oversight, compliance, policy development, reviews, and investigations support.",{"name":116,"@type":107,"acceptedAnswer":117},"What triggers reconvening of the IRM working group?",{"text":118,"@type":110},"Reconvening is required when annual program goals or assessments are revalued, when clarification is needed for unprecedented events or incidents, when organizational structure or critical assets change significantly, or to assist gaps if vacancies exist in the program.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},244222,1791720847,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":8,"category_name":11,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":79,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":140,"read_time":73},1236954677761,"https://us-avatar.wpscdn.com/davatar_994ba38a5ba835b3df7d355c54d3ed8d","Security and Awareness Program Governance Template  \nDisclaimer: Code42 is not providing legal advice. The policy guidelines and templates provided are examples for general informational purposes only. Consult with your organization’s general counsel and other relevant stakeholders before using any provided template(s) .  \nOverview  \nEnables effective empowerment, oversight, and compliance of an Insider Risk Management Program. Effective governance confi rms adherence to federal and state law and helps alleviate privacy and civil liberty concerns. Organizations often defi ne the structure and naming conventions for Insider Risk Management (IRM) Program governance.  \nConsiderations for Internal Roles and Structure  \n● Organization Head  \n● Designated Senior Official or Leader  \n● Insider Risk Management (IRM) Executive Council/Committee  \n● Insider Risk Management (IRM) Working Group  \n● Change Control Board  \n● Insider Risk Program Manager  \n● Program Liaison (Optional)  \nOrganization Head  \n● Provides Insider Risk Management (IRM) program mission and vision  \n● Ensures the Insider Risk Management (IRM) program operates within scope, mission, and budget  \n● Ensures the Insider Risk Management (IRM) program complies with established requirements and guidelines  \n1  \n● Ensures enterprise-wide compliance in the Insider Risk Management (IRM) program  \n● Approves policy, procedures, and guidance recommended by the designated senior officia l  \n● Makes fi nal insider risk acceptance decisions  \n● Ensures risk acceptance decisions are documented and disseminated  \n● Serves on or manages the Insider Risk Working Group (IRWG) as appropriate  \nDesignated Leader or Officia l  \nMay occupy or be known in another insider risk management program capacity ( program manager, organization head, executive council member) .  \n● Ensures the insider risk management program operates within scope, mission, and budget  \n● Ensures the insider risk management program complied with established requirements and guidelines  \n● Reviews and approves annual self-assessments and any independent third-party assessment of the insider risk management program  \nInsider Risk Management (IRM) Executive Council/Committee  \n● Reviews and recommends Insider Risk Management (IRM) program requirements and improvements  \n● Approves recommendations of the Inser Risk Working Group (IRWG) and change control board  \n● Enables insider risk policy, procedures and guidance development or modification  \nInsider Risk Management (IRM) Working Group  \nMay be instrumental to the successful launch and stewardship of the Insider Risk Management (IRM) Program. Reviews existing policies, procedures, and guidance for inclusion of insider risk program requirements and produces recommended changes.  \n2  \nDevelops the Insider Risk policy, procedures, and guidance in coordination with the Insider Risk Program Manager. Assists in “socializing” the Insider Risk Management Program across the organization. May continue past the IRM program officia l launch on a “as needed” basis. Ensures the successful onboarding on new insider risk management program managers.  \nReconvenes as required when set criteria are met:  \n● Annual revaluation of program goals or assessment  \n● Program officials or analyst require clarification in case of unprecedented events or incidents  \n● Significant changes to the organizational structure or its critical assets require change or refi nement to program scope  \n● May assist with gaps in insider risk program management in the event where a vacancy exists within the program  \nChange Control Board  \nReviews all recommended changes to existing Insider risk management program policies and procedures. Makes recommendations for proposed changes to the executive council/committee for approval.  \n● CONOPS or workflows for investigations  \n● Guidelines, practices, or standards  \n● Collected data sources  \n● Anomaly detection rules  \n● Training materials or activities if significant changes are propo","cbCaifgyGUHcsdhz","https://ap.wps.com/l/cbCaifgyGUHcsdhz","pdf",111320,"English","# Overview\n## Considerations for Internal Roles and Structure\n## Change Control Board\n## Insider Risk Program Manager\n## Program Liaison(s)","[{\"question\":\"What is the purpose of this governance template for an Insider Risk Management program?\",\"answer\":\"It enables effective empowerment, oversight, and compliance for an IRM program, confirming adherence to federal and state law and helping address privacy and civil liberty concerns.\"},{\"question\":\"Which internal roles are defined, and what are their core responsibilities?\",\"answer\":\"The template defines the organization head, designated senior official or leader, IRM executive council/committee, IRM working group, change control board, and insider risk program manager, each with responsibilities spanning scope/budget oversight, compliance, policy development, reviews, and investigations support.\"},{\"question\":\"What triggers reconvening of the IRM working group?\",\"answer\":\"Reconvening is required when annual program goals or assessments are revalued, when clarification is needed for unprecedented events or incidents, when organizational structure or critical assets change significantly, or to assist gaps if vacancies exist in the program.\"}]","Security and Awareness Program Governance Template - IRM Program Governance Roles and Structure | PDF",1789214026]