In short
An insider threat is the risk that someone with legitimate access, such as an employee, contractor or partner, misuses it, whether on purpose or by mistake.
Key takeaways
- Controls include least privilege, segregation of duties, monitoring and prompt removal of access when people leave.
- Data loss prevention tools can flag unusual downloads or transfers.
- Background checks and a culture of reporting concerns also help.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
To send a confidential message that only the intended recipient can read, which key should the sender use to encrypt it?