A security risk that originates from within the organization, involving employees, contractors, or business associates who have inside information and may misuse their access.