An insider with access to critical assets who is compromised by an outside threat actor is called a ...

An insider with access to critical assets who is compromised by an outside threat actor is called a ...

• A. Professional Insider
• B. Malicious Insider
• C. Negligent Insider
• D. Compromised Insider

Answer: (D)

This question tests the label for a trusted insider whose access has been taken over by an external attacker. When someone inside an organization who has legitimate rights to critical assets is controlled by an outside actor, the insider is described as a compromised insider. The attacker uses that insider’s credentials and trusted position to reach systems and data, often blending in with normal, authorized activity and making detection harder. This differs from a malicious insider who acts on their own intent, or a negligent insider whose risk comes from carelessness rather than an outside takeover. The key idea is that the compromise of the insider’s access by an external actor is what defines the situation, not the insider’s intent or level of care. Thus, the appropriate term is compromised insider.

This question tests the label for a trusted insider whose access has been taken over by an external attacker. When someone inside an organization who has legitimate rights to critical assets is controlled by an outside actor, the insider is described as a compromised insider. The attacker uses that insider’s credentials and trusted position to reach systems and data, often blending in with normal, authorized activity and making detection harder. This differs from a malicious insider who acts on their own intent, or a negligent insider whose risk comes from carelessness rather than an outside takeover. The key idea is that the compromise of the insider’s access by an external actor is what defines the situation, not the insider’s intent or level of care. Thus, the appropriate term is compromised insider.