Insider Threat Awareness Flashcards
6 cards from real SFPC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Insider Threat Awareness flashcards as text
What is the difference between a malicious and unintentional insider threat?
Answer: Malicious insiders deliberately cause harm while unintentional insiders cause harm through negligence or mistakes
Malicious insiders deliberately exploit their access to cause harm, while unintentional insiders cause harm through careless actions, mistakes, or falling victim to social engineering.
What is 'data exfiltration' in the context of insider threats?
Answer: The unauthorized transfer of sensitive data from an organization by an insider
Data exfiltration by an insider refers to the unauthorized transfer of sensitive organizational information to external parties, typically for financial gain, to benefit a foreign intelligence service, or for competitive advantage.
What is 'workplace violence' as it relates to insider threat programs?
Answer: Physical or threatened harm by a current or former employee, aimed at coworkers or the organization
Workplace violence by a current or former employee is considered an insider threat because it involves someone with insider access or knowledge targeting the organization or its personnel.
What is 'elicitation' as a foreign intelligence technique targeting insiders?
Answer: The use of seemingly casual conversation to extract sensitive information from an unwitting target
Elicitation is a technique used by foreign intelligence operatives to extract sensitive information through seemingly innocent conversation, without the target realizing they are being manipulated.
What is a 'security violation' in the context of insider threats?
Answer: An intentional or unintentional failure to comply with security policies, potentially resulting in the compromise of classified or sensitive information
A security violation is any failure to comply with established security requirements, whether intentional or negligent, that could result in unauthorized access to or disclosure of classified information.
What is the purpose of 'security awareness training' in an insider threat context?
Answer: To help employees recognize and report indicators of insider threat activities and follow security requirements
Security awareness training educates employees about the types and indicators of insider threats, their reporting obligations, and the security requirements they must follow.