Which term highlights the risk from authorized users who may abuse their access?

Which term highlights the risk from authorized users who may abuse their access?

• A. Insider Threats
• B. Green Hat
• C. Threat Intelligence
• D. FedRAMP

Answer: (A)

Insider threats highlight the risk from people inside the organization who have legitimate access but may abuse it. This includes current or former employees, contractors, or partners who can act with approved credentials and privileges, yet choose to misuse them—such as stealing data, exfiltrating information, or compromising systems. Recognizing this risk leads to practical controls like least-privilege access, regular access reviews, strong monitoring, and separation of duties to detect and deter misuse. Other options don’t describe this specific risk: Green Hat isn’t a standard term for insider abuse in this context; threat intelligence covers information about threats (often external) rather than the risk from authorized users; FedRAMP is a cloud security program, not a risk category.

Insider threats highlight the risk from people inside the organization who have legitimate access but may abuse it. This includes current or former employees, contractors, or partners who can act with approved credentials and privileges, yet choose to misuse them—such as stealing data, exfiltrating information, or compromising systems. Recognizing this risk leads to practical controls like least-privilege access, regular access reviews, strong monitoring, and separation of duties to detect and deter misuse. Other options don’t describe this specific risk: Green Hat isn’t a standard term for insider abuse in this context; threat intelligence covers information about threats (often external) rather than the risk from authorized users; FedRAMP is a cloud security program, not a risk category.