Threat Actors 2.1

Question 1

A […] is the entity responsible for an event that has an impact on the safety of another entity

Answer 1

Threat Actor

Question 2

An […] threat actor comes from inside the organization

Answer 2

Internal

Question 3

An […] threat actor comes from outside your organization

Answer 3

External

Question 4

Attributes of a threat actor include

Answer 4

• Resources / Funding
• Whether they are Internal / External
• Are they Sophisticated / Unsophisticated?

Question 5

Motivations of a threat actor:

Answer 5

• Data exfiltration
• Espionage
• Service Disruption
• Blackmail
• Financial Gain
• Philosophical Beliefs
• Revenge
• Disruption/Chaos

Question 6

A […] threat actor is outside of your organization and belongs to a government or branch of said government.

Motivations might include data exfil, revenge, disruption, or war.

Usually the highest sophistication

Answer 6

Nation State

Question 7

An […] is not knowledgeable, and anyone can do it. Usually run pre-made scripts without knowing what they’re actually doing.

Can be internal or external

Limited resources

Answer 7

Unskilled Attacker

Question 8

A […] is a skilled attacker, usually motivated by philosophy, revenge, or disruption.

Often an external entity, but can infiltrate and become an insider threat

Funding usually limited

Answer 8

Hacktivist

Question 9

A […] is usually motivated by revenge or financial gain, and comes from inside your organization.

Extensive resources (using the organizations resources against themselves)

Medium level of sophistication (Institutional knowledge)

Answer 9

Insider Threat

Question 10

[…] refers to professional criminals, usually motivated by money

Almost always an external entity

Very sophisticated

Answer 10

Organized Crime

Question 11

[…] refers to a rogue worker who circumvents the existing infrastructure and creates their own

Limited resources (Company Budget)

Medium Sophistication

May not have IT training and knowledge

Answer 11

Shadow IT