IronSights

Threats & attacks

Insider threat

A security risk that originates from within an organisation — a current or former employee, contractor, or business partner who misuses their authorised access, whether intentionally or accidentally.

Also known asmalicious insiderinsider risk

In plain English

Not all threats come from outside. Insider threats include employees who steal data before resigning, contractors who exceed their authorised access, and well-meaning staff who accidentally expose sensitive data through misconfiguration or poor judgment. Microsoft Purview's Insider Risk Management module monitors for anomalous data access and exfiltration patterns.

Keep learning

More terms in the IronSights Glossary.