Which of the following groups represents the most likely source of an asset loss through the inappropriate use of computers?

Visitors typically have very limited or no access to internal computer systems, significantly reducing their ability to misuse assets.

Customers generally interact only with public-facing systems and services, not internal assets, limiting their exposure and opportunity for misuse.

Employees already have authorized access to internal networks, systems, and sensitive data, making inappropriate use far easier and harder to detect than external attacks. Insider threats - whether malicious or accidental - consistently rank as the leading cause of organizational data loss in security studies. Their privileged access and knowledge of internal controls gives them a significant advantage over outside parties.

Hackers are an external threat and must overcome security barriers to gain access, making them a significant but less statistically common source of loss compared to insiders with pre-existing access.