"Insider" doesn't always mean a saboteur. CCST often asks you to distinguish these three.
Deliberately harms the org. Disgruntled employee, departing employee taking IP, someone planted by a competitor or nation-state.
Means no harm but causes it anyway. Falls for phishing, emails files to the wrong address, leaves a laptop in a cab. The most common type.
A legitimate account that an outside attacker has taken over (stolen creds, malware). The "insider" is really an outsider wearing the insider's badge.
For teachers Cybersecurity and networking, grades 7 to 12 and introductory college courses
Compare every threat actor across skill, funding, and motivation. Then drill yourself on which one fits a scenario.
In class: Compare attackers by skill, funding and motive, then match them to scenarios.
Students need no account and nothing to install, so it works on Chromebooks and as a sub plan.
Share to Google ClassroomMore cybersecurity and networking activities →