Which of the following is an indicator of potential insider threats in an industrial setting?

• A. Unusual access patterns
• B. Regular schedule adherence
• C. Password expiry reminders
• D. High levels of physical fitness among staff

Answer: (A)

Unusual access patterns signal insider risk because they show behavior that doesn’t align with a person’s approved role and routine. In an industrial setting, employees typically access only the areas and systems they need for their work. When someone starts entering restricted zones, data centers, or critical equipment rooms outside their normal hours, or accesses far more files than their role requires, it can indicate they’re pursuing information, performing sabotage, or their credentials may be compromised. Such patterns warrant further review and monitoring, especially when they occur repeatedly or alongside other anomalies.

Regular schedule adherence is expected behavior and doesn’t raise alarms on its own, since it aligns with what the person is supposed to be doing. Password expiry reminders are routine security housekeeping and don’t reflect someone’s threat level. High levels of physical fitness among staff don’t relate to security risk indicators in this context, so they don’t point to insider threats.