Select ALL measures from the course material that can reduce the impact or likelihood of insider threats.

### Why this is right - **Apply least privilege** limits users to the access needed for their roles. - **Monitor and audit user activity** can reveal unusual access or data movement. - **Use user and entity behavior analytics** can identify deviations from expected behavior. - **Use data loss prevention controls** can monitor or restrict unauthorized movement of sensitive information. ### The concept Insider threats can be malicious, negligent, or caused by an external attacker using a compromised insider account. Controls should reduce unnecessary access and help detect unusual behavior without assuming that every unusual action proves wrongdoing. Investigation should establish context and evidence before conclusions are drawn. Access controls, training, monitoring, and response procedures work together. ### The other options - **Give every employee unrestricted access to simplify work**: This increases exposure by removing boundaries and contradicts least privilege. ### Terms - **Least privilege**: Giving an account only the access required for its work. - **User and entity behavior analytics (UEBA)**: Tools that analyze behavior patterns to identify unusual activity. - **Data loss prevention (DLP)**: Controls that monitor or restrict sensitive information movement. ### Remember Insider risk is managed through appropriate access, visibility, and fair evidence-based investigation.