The entity that causes the security attack.
Many different types
government - highly resourced
unskilled - just trying out stuff
hacktivist - politically motivated
insider - from within org
organized crime - corporate structure
shadow IT - from within the org