Which of the following is a threat to IT systems today?

• A. Hackers
• B. Insiders (fraud, threat, sabotage)
• C. Nation-State Actors
• D. Malicious Code

Answer: (B)

Insiders pose a significant risk to IT systems because they already have legitimate access and a deep familiarity with the environment, making it easier to misuse resources or steal information without triggering external alarms. They can commit fraud, sabotage operations, or quietly exfiltrate sensitive data by abusing privileged accounts or bypassing controls that protect against outsiders. The insider threat can be hard to detect since the activity often appears legitimate and may occur over long periods. Effective mitigation includes enforcing least privilege and separation of duties, strong authentication for privileged accounts, continuous monitoring, user behavior analytics, and clear policies plus rapid response plans. External threats like hackers, nation-state actors, and malicious code are real concerns as well, but insiders uniquely exploit trusted access and internal processes, which is why they are highlighted here.