Which term refers to both non-malicious and malicious insiders and outsiders, including spies, adversaries, terrorists, and others?

Which term refers to both non-malicious and malicious insiders and outsiders, including spies, adversaries, terrorists, and others?

• A. Natural
• B. Technical
• C. Operational
• D. Human

Answer: (D)

Understanding threat actors starts with recognizing who can cause harm. Threats come from different sources: natural events, technical failures, and human actions. The category that covers both insiders (people inside the organization) and outsiders (people outside) and includes those acting with or without malicious intent is humans. This includes employees who may unintentionally expose data, contractors, spies, criminals, adversaries, and terrorists—any person who can cause a security incident. Non-human sources like weather or automated systems aren’t people, so they belong to other categories. So, the label that encompasses all these potential risk sources, whether benign or hostile, is human.