Which term describes dangers arising from individuals with legitimate access to sensitive systems and data?

Which term describes dangers arising from individuals with legitimate access to sensitive systems and data?

• A. Insider Threats
• B. Green Hat
• C. FedRAMP
• D. Perimeter Security

Answer: (A)

Dangers arising from people who already have legitimate access to sensitive systems are described by insider threats. These threats come from individuals within an organization—employees, contractors, or partners—who can act with authorized credentials. They may cause harm intentionally, by stealing or sabotaging data, or unintentionally, through negligence or mistakes. Because insiders already cross the internal trust boundary, their actions can bypass many external defenses, making insider threats a central concern in cybersecurity risk management. Green Hat doesn't describe risks from authorized internal users; it refers to a type of researcher or hacker who finds vulnerabilities. FedRAMP is a government program for approving cloud services, not a threat category. Perimeter Security focuses on defending the network edge against external attackers, not the risks posed by people with legitimate access inside the system.

Dangers arising from people who already have legitimate access to sensitive systems are described by insider threats. These threats come from individuals within an organization—employees, contractors, or partners—who can act with authorized credentials. They may cause harm intentionally, by stealing or sabotaging data, or unintentionally, through negligence or mistakes. Because insiders already cross the internal trust boundary, their actions can bypass many external defenses, making insider threats a central concern in cybersecurity risk management.

Green Hat doesn't describe risks from authorized internal users; it refers to a type of researcher or hacker who finds vulnerabilities. FedRAMP is a government program for approving cloud services, not a threat category. Perimeter Security focuses on defending the network edge against external attackers, not the risks posed by people with legitimate access inside the system.