====== Threat Actor ====== The entity that causes the security attack. Many different types * government - highly resourced * unskilled - just trying out stuff * hacktivist - politically motivated * insider - from within org * organized crime - corporate structure * shadow IT - from within the org