A employee is capable of using authentication and information to (intentionally or unintentionally) harm a business.

Defense