Which term refers to threats arising from people, including insiders and outsiders?

• A. Natural
• B. Human
• C. Operational
• D. Physical

Answer: (B)

Threats that originate from people—whether someone inside the organization or an external actor—are described as human threats. This category covers actions by individuals that can compromise security, such as insider sabotage, social engineering by attackers, or user error that leads to a breach. Natural threats involve weather or natural events, while physical threats involve damage or theft of tangible assets and tampering with equipment. Operational risks relate to processes and procedures, not specifically to people as the threat source. Recognizing that the threat source is a person helps focus defenses on areas like access control, training, and awareness to reduce risks caused by human actions.