What term describes an individual who is responsible for a security violation plus evidence of deliberate disregard, gross negligence, and a pattern of negligence?

• A. Individual Culpability
• B. Insider Threat
• C. Willful Misconduct
• D. Negligence Pattern

Answer: (A)

When evaluating accountability for a security incident, the right term is someone who is personally blameworthy for the violation, demonstrated by deliberate disregard, gross negligence, and a pattern of negligent behavior. This label—individual culpability—captures both the act and the ongoing, intentional avoidance of proper controls that led to the breach. It signals that the person is not just a source of risk, but a responsible party whose actions and mindset warrant accountability.

Insider threat highlights who or what can create risk from within, not the specific label for the blamed individual. Willful misconduct focuses on intentional wrongdoing, which may not fully reflect a pattern of negligence and repeated disregard. A negligence pattern is descriptive but does not name the responsible party. Thus, the term that best fits all elements is individual culpability.