Even an insider with no bad intentions can get embroiled in facilitating an incident if they are approached outside of work and threatened or persuaded to take adverse action against their employer. An employee can easily fall victim to advanced social engineering, phishing, and ransomware attacks.
