Sarah Russell has explained that she does not consider insider threat a real problem on the HAL network. Describe a scenario where she could be wrong based on what you know of the network and discuss it in your main post. Then, answer the questions below. Don$$t forget that insider threats come in two distinct flavors:

Malicious $$ This is what we think of as an insider threat: the dastardly spy$,$ the enraged hacker employee, the janitor who is secretly the leader of Anonymous. Is this a real threat? I jest, but we think of these because there are real$-$world examples of these cases.

Non$-$malicious $$ Far more insider threat comes from accidents. Users click the links $($someone always clicks the link in a phishing email$),$ engineers accidentally turn off security tools, and programmers find a way to increase performance that manages to disable security features in critical environments.

Where can you see these threats becoming a problem in their environment? What kind of threats are they facing? Would they need to worry about both malicious and non$-$malicious threats?