Which threat describes individuals within an organization who may cause harm?

• A. External attacker
• B. Insider Threat
• C. Malware
• D. Phishing

Answer: (B)

Insider threat refers to individuals within an organization who may cause harm because they have legitimate access to systems and data. This access lets them misuse privileges, mishandle information, or exfiltrate data, whether intentionally or through negligence. The risk with insiders is that they are trusted to some degree and can bypass certain controls more easily than outsiders. External attacker describes someone outside the organization trying to break in; malware is software designed to cause damage or theft; phishing is a tactic used to deceive people into revealing credentials. So, the option that fits best is the insider threat—the risk posed by people inside the organization who could cause harm.