A person or entity responsible for an event identified as a security incident or as a risk is called what?

A person or entity responsible for an event identified as a security incident or as a risk is called what?

• A. Victim
• B. Threat actor
• C. User
• D. Auditor

Answer: (B)

In information security, the person or entity that can cause or has caused a security incident or contributed to a risk is called the threat actor. This term identifies who is responsible for the event and who might exploit vulnerabilities to harm, steal, or disrupt a system. A victim is the target that suffers impact, a user is someone who operates within the system (who may be legitimate or compromised but is not defined by responsibility for the incident), and an auditor is the person who reviews controls and evidence. Naming the threat actor is essential for threat modeling and incident response because it focuses on who or what could pose the risk, their capabilities, and their objectives, guiding defenses and risk management decisions.

In information security, the person or entity that can cause or has caused a security incident or contributed to a risk is called the threat actor. This term identifies who is responsible for the event and who might exploit vulnerabilities to harm, steal, or disrupt a system. A victim is the target that suffers impact, a user is someone who operates within the system (who may be legitimate or compromised but is not defined by responsibility for the incident), and an auditor is the person who reviews controls and evidence. Naming the threat actor is essential for threat modeling and incident response because it focuses on who or what could pose the risk, their capabilities, and their objectives, guiding defenses and risk management decisions.