The entity that causes the security attack.

Many different types

• government - highly resourced
• unskilled - just trying out stuff
• hacktivist - politically motivated
• insider - from within org
• organized crime - corporate structure
• shadow IT - from within the org