Cyber Securty Risk Assessment and Contingency Planning Malicious Insider

Question:-

defend why malicious insider is more high risk than rouge hacker, non-IT employees who don't have a clue 

Answer:-

A malicious insider is a greater threat compared to the Urbina: rouge hacker, non-IT employees who do not have a clue, as well as the top management who does not have support or care about security. A malicious insider is generally not treated by many organizations seriously but this is one of the greatest threats to the organization and information system of the organization. It includes sabotage, fraud, loss, or theft of confidential information caused by a trusted insider. There are various reasons that prove that malicious insider is a greater threat compared to the above-listed factors. The first and foremost reason is that the organization may not be prepared to deal with the malicious insider because it is generally conducted by the trusted insider. The organization can prepare itself for the outsider threats because it is obvious that outsider threats may occur at any point in time (Gamachchi et al., 2018). But the organization may not be aware of the insider threat. Apart from this, it is also important to consider that it is very tough to get aware of the attack (malicious insider) as soon as it happens. Thus, there is a high chance of greater loss because when the organization will understand what has happened the fraudulent can easily escape with the confidential information of the organization (Harilal et al., 2017). Thus, the degree of loss is also higher in malicious insider. Moreover, it is also tough for the organization to place a security measure to protect the malicious insider. Hence, it is a greater threat.