Insider Threats

An insider threat is a risk posed by people with legitimate access: employees, contractors, or partners. Because they are already trusted, insiders can cause damage that perimeter defenses never see.

Insiders fall into categories:

• Malicious: intentionally steal or sabotage (e.g. selling data, revenge).
• Negligent: careless mistakes, mishandling data.
• Compromised: a legitimate account taken over by an attacker.