Internal threat actors
Individuals or entities within an or who pose a threat to its security, ie, angry employee
External threat actors
Individuals or groups outside an organization who attempt to breach it’s cybersecurity defenses
Resources and funding
Refers to the tools, skills and personnel at the disposal of given threat actor
Level of sophistication and capability
Refers to their technical skill, complexity of tools and techniques, and ability to evade detection and countermeasures
Script Kiddie
Individual with limited technical knowledge, who uses premaid software or scripts to exploit a computer system and networks, often without understanding underlying principals