An insider threat occurs when an insider — an employee, contractor, or anyone with authorized access to sensitive data — introduces potential harm to the organization's data, digital infrastructure, or operations. It’s focused on the individual or employee engaging in the activity that creates the potential for harm. Threats can be:
Intentional: Intentional insider threats include things such as an employee deliberately stealing or damaging data.
Unintentional: Unintentional insider threats include things such as an employee accidentally clicking on a phishing link and introducing malware into the system.
Insider risk refers to the potential for damage to an organization due to the actions taken by insiders. This includes the vulnerabilities that arise from having individuals inside the organization with access to sensitive information or systems, whether they intend to misuse that access or not. Insider risk is not tied to a specific individual but rather represents a general potential for harm.