An individual or entity that poses a threat to the security of an organization. Also called a "malicious actor," the threat actor may be external, which is outside the organization and generally the most dangerous. An internal threat actor can be an employee or contractor that has greater access to sensitive data. See
hacktivist,
hacker and
cybercrook.