This qualitative research provides insights to help executives, managers, and information security
professionals better understand insider threat activities by providing a sensible classification system.
Using interview data from cybersecurity subject matter experts, a novel construct was developed that
demystifies employee infraction intentions by introducing categorizations of unwitting, witting,
unmalicious, and malicious.