医療費請求の定期監査により、加入者の知らないうちにいくつかの請求書が提出されていたことが判明しました 医療費請求会社のシステムの監査ログを確認したところ、従業員が顧客記録をダウンロードし、個人の銀行口座への直接入金情報を調整したことが判明しましたこのアクションは次のように説明しますか?
正解:A
An insider threat is a threat to an organization that comes from negligent or malicious insiders, such as employees, former employees, contractors, third-party vendors, or business partners, who have inside information about cybersecurity practices, sensitive data, and computer systems. The action described in the question is an example of a malicious insider threat, where an employee intentionally misused their authorized access to harm the organization by stealing customer records and diverting funds to their personal bank account. References: What Is an Insider Threat? Definition, Types, and Prevention - Fortinet; What are insider threats? | IBM; What Is an Insider Threat? Definition, Examples, and Mitigations; Insider Threat Mitigation | Cybersecurity and Infrastructure ... - CISA