An ongoing risk involving fraud and misconduct by officers, employees and other personnel, together with the leakage of confidential information due to information security incidents. This includes prevention and response through stronger compliance, information security policies, management frameworks and awareness activities.