Cybersecurity Glossary

Threat Actor

The person or group behind an attack, and their motive.

What Threat Actor means

Threat actors range from opportunistic criminals running automated campaigns, through organised ransomware groups operating as businesses, to state aligned groups pursuing intelligence, and insiders acting from grievance. Motive shapes method, target selection and persistence.

Why Threat Actor matters for small businesses and nonprofits

Knowing who plausibly targets you keeps spending proportionate. A small nonprofit faces mostly opportunistic crime, so basic controls applied consistently deliver far more than expensive tooling aimed at sophisticated adversaries.

What to do about Threat Actor

Three steps to deal with Threat Actor

  • Describe your realistic adversary before choosing controls
  • Assume opportunistic attacks are constant and automated
  • Revisit the assessment if you take on higher profile clients or sensitive work

Not sure where you stand on this?

We review your current setup against the basics, tell you plainly what is covered and what is not, and give you a ranked list with effort and cost. No jargon and no scare tactics.