Audit trail logs showed that a bank employee accessed customer accounts and transferred funds to a personal bank account. Which of the following describes this action?

The correct answer is A. Insider threat. An insider threat is a security risk that originates from within the organization - typically a current or former employee, contractor, or partner who has legitimate access but misuses it. In this scenario, the bank employee already had authorized access to customer accounts…

Security Principles

Question

Options

AInsider threat
BThird party risk
CSocial engineering
DData breach

How the community answered

(21 responses)

A
90% (19)
B
5% (1)
C
5% (1)

Explanation

An insider threat is a security risk that originates from within the organization - typically a current or former employee, contractor, or partner who has legitimate access but misuses it. In this scenario, the bank employee already had authorized access to customer accounts and exploited that access for personal gain. This is not a data breach (which involves external exposure of data), not social engineering (which involves manipulating others), and not a third-party risk (which involves external vendors or partners).

Topics

#Insider threat#Threat actors#Cybercrime#Risk management

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice