Question

What types of threats would an untrained employee pose to Information Systems Security?

Answer 1

careless & untrained employees, employees that are duped or fall prey to social engineering type attacks, and malicious employees
The security softie, who knows very little about security and poses a threat by using a work computer at home or letting family members use it.
The gadget geek, who comes to work armed with a variety of devices that get plugged into the work PC
he squatter, who uses company IT resources inappropriately
The saboteur, who will hack into areas with restricted access or infect the network.
These kinds of stories are exciting to read and easier for the hacked company to admit to. But the reality is that no matter the size or the scope of a breach, usually it’s caused by an action, or failure, of someone inside the company.
The most dangerous aspect of insider threats is the fact that the access and activities are coming from trusted systems, and thus will fly below the radar of many detection technologies. Particularly in the latter two categories, malicious actors can erase evidence of their activities and presence to further complicate forensic investigations.