Alessandro AleddaInsider Threat and Risk

INTRA/GV/GV012Program metrics and reporting

What the program reports about its own operation to the body that governs it, and how often. Not what the program found, but how much of it there was, how long it took, and what it cost.

Pillar
GV  |  Governance and mandate
Sources cited
1
Added
30 AUGUST 2026
Updated
30 AUGUST 2026
ControlJurisdictionSourceWhat it establishesPrerequisite or recommendation
RecommendedUnited Kingdomwhere writtenBoard Engagement and GovernanceNPSA · read 29 Aug 2026That one board member holds overall responsibility for protective security and is regularly engaged with the program, with a non-executive director as an independent champion.The board member who holds the responsibility is to be regularly engaged with the people running the program and to hold a firm understanding of the risks it addresses. What is to be reported, and how often, is not stated.