Internal threats originate from where?

• A. From outside the organization
• B. From open internet services
• C. From external contractors only
• D. From within the organization for reasons like data theft, espionage, sabotage, and malice

Answer: (D)

Internal threats come from people who are part of the organization. These insiders have legitimate access to systems, data, or facilities, which they can misuse for data theft, espionage, sabotage, or malicious acts. Because they already hold approved credentials, their actions can be harder to detect and prevent than those from outsiders.

The other options point to sources outside the organization or limit the threat to external contractors, which misses the defining aspect of insider risk. While external attackers exist, the scenario described focuses on motives and origins originating from within the organization.