Prior work on insider threat classification has adopted a range of definitions, constructs, and terminology, making it challenging to compare studies. We address this issue by introducing a unified insider threat classification model built through a comprehensive and systematic review of prior work. An insider threat can be challenging to predict, as insiders may utilise motivation, creativity, and ingenuity. Understanding the different types of threats to information security (and cybersecurity) is
crucial as it helps organisations develop the right preventive strategies. This paper presents a thematic
analysis of the literature on the types of insider threats to cybersecurity to provide cohesive definitions
and consistent terminology of insider threats. We demonstrate that the insider threat exists on a
continuum of accidental, negligent, mischievous, and malicious behaviour. The proposed insider threat classification can help organisations to identify, implement, and contribute towards improving
their cybersecurity strategies.