an entity that has an impact on the security of other entities includes: unskilled attackers nation-state attackers organised crime insider threats shadow IT hacktivists