Internal Office Threats

 Insider threats — accidental or malicious data leaks by employees. Remedy: least-privilege access, activity monitoring, offboarding checklist.
 Lost/stolen devices — laptops or phones with sensitive data. Remedy: full-disk encryption, remote wipe capability, device management (MDM).
 Unsecured cloud storage/shadow IT — data exposed via misconfigured or unauthorized apps. Remedy: approved app lists, cloud access security tools, regular audits. USB/removable media — malware introduced via infected drives. Remedy: disable unauthorized USB ports, endpoint scanning.
Physical security gaps — unauthorized office access to servers/workstations. Remedy: badge access, CCTV, locked server rooms, clean-desk policy.