Insider threats are security breaches or losses caused by humans due to negligence.

• A. External attackers
• B. Hardware failures
• C. Security breaches or losses caused by humans due to negligence
• D. Natural disasters

Answer: (C)

Insider threats come from people inside the organization who have trusted access, and when the risk is tied to negligence, it means the breach results from careless or unintentional actions rather than deliberate malice. This explains why the description fits: security breaches or losses caused by humans due to negligent behavior—like leaving a laptop unlocked, sharing passwords, or mishandling sensitive data—can lead to exposure or compromise even without an external attacker.

External attackers are people outside the organization who try to break in, which is a different scenario. Hardware failures are problems with the equipment itself, not the actions of people. Natural disasters are environmental events and environmental impact, not human-caused breaches.