GV001Program charter and mandate

The instrument that establishes the program, states its authority, names its sponsor, and bounds what it may reach.

Control	Jurisdiction	Source	What it establishes	Prerequisite or recommendation
Recommended	European Unionwhere written	Insider Threat Program Development ManualCoESS, co-financed by the Internal Security Fund of the European Union · read 11 Aug 2026	The structure of an insider risk management program, as the closest thing to doctrine issued under European Union funding, unrevised since 2019.	The Union-funded manual addresses how a program is structured, and states no legal basis for any of it.
Recommended	United Kingdomwhere written	Insider Risk Mitigation FrameworkNPSA · read 11 Aug 2026	A structure for an insider risk management program that an organization reviews itself against, with governance and culture as foundations rather than adjuncts.	The charter is written to be reviewed against rather than filed: governance and culture are set out as things a program is measured on, not as preamble to the controls.