What is Insider Threat?
As its name implies, an 'Insider Threat' originates
inside an organization. An 'insider' is any person who has
or had authorized access to or knowledge of an organization's
resources, including personnel, facilities, information, equipment,
networks, and systems. 'Insider threat' can manifest from
malicious, complacent, negligent or unintentional acts that
negatively affect the integrity, confidentiality, and availability
of the organization, its data, personnel, or facilities. Certainly,
'Insider Threat' can be an activity by a bad actor
employee, but can also arise from an inadvertent or unknowing
action inside an organization (such as an employee who
unintentionally opens a phishing email or clicks on a malicious
link).
