Which of the following is a common indicator of a potential insider threat?
1: Excessive access to sensitive data unrelated to their job role
2: Use of two-factor authentication for secure access
3: Regular password changes
4: Reporting suspicious activities to security teams
Answer
Excessive access to sensitive data unrelated to their job role
Explanation
Employees accessing sensitive data outside their job scope or at unusual times can be a warning sign of a potential insider threat.