- Malicious insiders: These are individuals who deliberately misuse their access for personal gain or to harm the organization. - Negligent insiders: Employees who, through carelessness or lack of awareness, expose the organization to risks. - Compromised insiders: Individuals whose accounts have been hijacked by external attackers.