Key Learning Objectives

Internal cyber security threats are defined as threats originating from within an organization, and they differ from external threats which come from outside the organization. Which of the following best describes this difference?

• Internal threats originate from within the organization, while external threats come from outside.

• Internal threats are always accidental, while external threats are always intentional.

• Internal threats involve only physical attacks, while external threats involve only cyber attacks.

• Internal threats are less dangerous than external threats.

Internal threats can occur through employee sabotage and theft, such as:

• Equipment theft, data theft, or deliberate damage

• External hacking attempts

• Natural disasters

• Software updates

Internal threats can occur through which of the following methods?

• Unauthorized access to secure areas or administrative functions

• Regular software updates

• Employee training programs

• Physical security measures

Weak security measures and unsafe practices in workplaces can lead to which of the following?

• Internal threats

• Increased productivity

• Better teamwork

• Improved customer satisfaction

Accidental loss or disclosure of data due to poor training or monitoring can result in internal threats because:

• Employees may unintentionally expose sensitive information.

• It always leads to external cyber attacks.

• It guarantees data will be recovered quickly.

• It prevents any form of data breach.

Which of the following best describes the motivations, risks, and impacts involved in real-world case studies of insider threats?

• Insider threats are often motivated by personal gain, revenge, or coercion, and can result in significant financial and reputational damage to organizations.

• Insider threats are only motivated by external hackers and have no impact on organizations.

• Insider threats are always accidental and do not pose any risks to organizations.

• Insider threats are motivated by company loyalty and always benefit the organization.

Unsafe practices in given scenarios can be reduced by which of the following methods?

• Proposing practical solutions to reduce internal risks

• Ignoring the risks and continuing as usual

• Increasing the number of unsafe practices

• Avoiding any changes to current procedures

Demonstrate understanding of internal threat concepts through a short quiz, reinforcing key takeaways.

• Internal threats originate from within an organization.

• Internal threats are always caused by external hackers.

• Internal threats have no impact on organizational security.

• Internal threats are only related to physical security.

In a company, who is considered to pose a bigger danger?

• Hackers outside

• Employees inside

• Customers

• Business partners

Fill in the blank: Internal threats are risks caused by people inside the organization such as ________, contractors, and partners.

• employees

• customers

• vendors

• clients