An entity inside the security perimeter that is authorized to access system resources but uses them in a way not approved by those who granted the authorization.
Sources:
NIST SP 1800-25B
under Insider
from
RFC 4949, NIST SP 800-82r3
NIST SP 1800-26B
under Insider
from
RFC 4949, NIST SP 800-82r3
NIST SP 800-82r3
under Insider
Any person with authorized access to any organizational resource, to include personnel, facilities, information, equipment, networks, or systems.
Sources:
NIST SP 800-53 Rev. 5
from
CNSSI 4009-2022 - Adapted
Any person with authorized access to business resources, including personnel, facilities, information, equipment, networks, or systems.
Sources:
NISTIR 7621 Rev. 1
under Insider
from
CNSSI 4009-2022 - adapted