Edit

Item

Description An entity with authorized access (i.e., within the security domain) that has the potential to harm an information system or enterprise through destruction, disclosure, modification of data, and/or denial of service.

Source https://csrc.nist.gov/glossary/term/insider_threat

Context