CompTIA Security+ (SY0-501) — Question 968

A security auditor is putting together a report for the Chief Executive Officer (CEO) on personnel security and its impact on the security posture of the whole organization. Which of the following would be the MOST important factor to consider when it comes to personnel security?

Answer options

• A. Insider threats
• B. Privilege escalation
• C. Hacktivist
• D. Phishing through social media
• E. Corporate espionage

Correct answer: A

Explanation

Insider threats are the most significant concern in personnel security because individuals within the organization can exploit their access to data and systems for malicious purposes. While privilege escalation, hacktivism, phishing, and corporate espionage are all relevant security issues, they either stem from external sources or are less likely to occur without insider involvement, making them secondary to the threat posed by insiders.