insider threat

A vector of risk to an organization’s AV or information systems that comes from within the organization, such as employees, contractors, or other associates. These parties generally have increased access to systems and a greater knowledge of their defenses.