Which category includes individuals who pose threats from within?

Which category includes individuals who pose threats from within?

• A. Insider threats
• B. External threats
• C. Cyber threats
• D. Environmental hazards

Answer: (A)

The key idea here is identifying where the threat originates from. An insider threat refers to individuals who are already inside the organization—such as employees, contractors, or partners who have legitimate access—and who pose a risk by abusing that access, sharing sensitive information, or otherwise harming operations. This internal origin is what sets insider threats apart from other categories; the danger comes from people who are trusted enough to be inside the system, making detection and prevention more challenging. External threats come from outside the organization, so they aren’t about people already inside. Environmental hazards involve physical or environmental risks like disasters or unsafe conditions, not human actors. Cyber threats describe the method or vector of attack (often digitally), and while insiders can carry out cyber actions, the defining factor for this item is the actor being inside the organization.

The key idea here is identifying where the threat originates from. An insider threat refers to individuals who are already inside the organization—such as employees, contractors, or partners who have legitimate access—and who pose a risk by abusing that access, sharing sensitive information, or otherwise harming operations. This internal origin is what sets insider threats apart from other categories; the danger comes from people who are trusted enough to be inside the system, making detection and prevention more challenging.

External threats come from outside the organization, so they aren’t about people already inside. Environmental hazards involve physical or environmental risks like disasters or unsafe conditions, not human actors. Cyber threats describe the method or vector of attack (often digitally), and while insiders can carry out cyber actions, the defining factor for this item is the actor being inside the organization.