An insider who bypasses general security procedures due to a lack of security awareness is known as a ...

An insider who bypasses general security procedures due to a lack of security awareness is known as a ...

• A. Professional Insider
• B. Negligent Insider
• C. Malicious Insider
• D. Compromised Insider

Answer: (B)

This item focuses on differentiating insider threat types by the reason behind the action. When an insider bypasses security procedures because they lack security awareness, the action stems from carelessness or ignorance rather than malicious intent. This makes them a negligent insider. They may not realize the risk of bypassing controls or may skip training, but their behavior isn’t driven by a desire to harm. By contrast, a professional insider operates with deliberate knowledge and often within their job role; a malicious insider intentionally exploits systems to cause harm; a compromised insider has their credentials taken over by an attacker, not because they chose to bypass controls due to ignorance. So the scenario best fits a negligent insider.

This item focuses on differentiating insider threat types by the reason behind the action. When an insider bypasses security procedures because they lack security awareness, the action stems from carelessness or ignorance rather than malicious intent. This makes them a negligent insider. They may not realize the risk of bypassing controls or may skip training, but their behavior isn’t driven by a desire to harm. By contrast, a professional insider operates with deliberate knowledge and often within their job role; a malicious insider intentionally exploits systems to cause harm; a compromised insider has their credentials taken over by an attacker, not because they chose to bypass controls due to ignorance. So the scenario best fits a negligent insider.