Learn in the textbookClassifying Threats — Human Wrongdoing and Accidents
DefinitionInsider fraud (内部不正) is when someone inside an organization, such as an employee, abuses the access rights they were given to deliberately take information out, tamper with data, and so on.
ExplanationBecause it uses legitimate access rights, it is harder to detect than an attack from outside. Countermeasures include limiting access rights to what the job needs and keeping and reviewing records of operations (logs). Promptly disabling the accounts of people who have left also helps prevent information from being taken out.
AnalogyIt is like a shop clerk entrusted with the key to the safe taking its contents for themselves.