Which of the following is identified as a main threat actor group?

• A. Insiders
• B. Script Kiddies
• C. Casual Hackers
• D. APT (Nation State Actors)

Answer: (D)

Advanced Persistent Threats are identified as a main threat actor group because they represent highly capable, long-running campaigns typically attributed to nation-state actors. They operate with substantial resources, patience, and technical sophistication, enabling targeted intrusions, prolonged footholds, and carefully planned exfiltration or impact. This combination of persistence, scale, and geopolitical motivation sets APTs apart as a primary concern for organizations facing sophisticated external threats.

Insiders pose a different risk profile: threats coming from within the organization, which can be due to misused access or collusion, but they are not categorized as the global main external threat group. Script kiddies and casual hackers are generally low-skill, opportunistic attackers who lack the resources and sustained commitment of APTs, so they aren’t considered the primary threat actor group in typical security threat models.