Which of the following is an example of an insider threat indicator?

• A. Staff asking sensitive questions
• B. Staff wearing casual clothing
• C. Staff taking lunch breaks
• D. Staff following procedures

Answer: (A)

Insider threat indicators are behaviors that suggest someone inside the organization may pose a risk to security or data. When staff ask sensitive questions about confidential data, access controls, or critical systems, it can signal curiosity about, or intent to test, weaknesses or to gain unauthorized access. That kind of probing is a red flag because it targets restricted information and security boundaries.

In contrast, casual clothing, taking lunch breaks, or strictly following procedures are normal, everyday behaviors that don’t inherently point to malicious intent or insider risk. They don’t reveal attempts to bypass controls or access sensitive information.

So, asking about sensitive information is the clearest indicator of a potential insider threat, since it directly relates to access and exposure of protected data.