Which statement best describes an insider threat?

• A. An individual with access who exploits vulnerabilities in the transportation domain.
• B. An individual with no access who does not affect security.
• C. A person who follows all security protocols without fail.
• D. A visitor who never interacts with secure areas.

Answer: (A)

Insider threat means someone who already has authorized access and then uses that access to harm security, systems, or operations. In the transportation realm, this fits when a staff member or contractor with legitimate privileges exploits vulnerabilities in order to cause disruption or breach protections.

The statement that describes this best is someone who has access and uses it to exploit vulnerabilities in the transport domain. That captures both the internal position and the misuse of that access, which is the essence of an insider threat.

The other scenarios describe outsiders or non-threatening behavior (no access, strictly following security protocols, or a visitor who doesn’t interact with secure areas), so they do not fit the idea of an insider threat.