Insider risk is risk associated with poor cyber hygiene and careless or neglectful use of sensitive data. An insider risk is not necessarily an insider threat.
All users present some level of risk whether from adding the wrong contact to an email, using unapproved and insecure software, or failing to recognize phishing attempts.
