 who has or had authorized access to an 
organization's network, system, or data and intentionally exceeded or misused 
that access in a manner that negatively affected the confidentiality, integrity, 
or availability of the organization's information or information systems.” 
6.1 Implications 
A malicious insider, such as a system administrator, in an improperly designed 
cloud scenario can have access to potentially sensitive information. 
From IaaS to PaaS and SaaS, the malicious insider has increasing l