malevolent activity
163563·updated Aug 30, 2026This is a compositional prepositional phrase, not a term of art with a specialized or stipulated meaning. It functions as the condition-modifier in a risk statement: it describes the circumstance in which harmful, intentional acts by insiders — fraud, sabotage, unauthorized disclosure — can be carried out by a single individual acting alone, without needing to coordinate with or depend on another person. Separation of duties addresses the potential for abuse of authorized privileges and helps to reduce the risk of malevolent activity without collusion — meaning that when duties are properly divided, no one person retains enough unilateral access or authority to complete a harmful act on their own. The phrase is used across access-control and insider-threat literature as shorthand for the residual single-actor threat that separation of duties is designed to neutralize, and its meaning is entirely derivable from its component words in ordinary English.
Source
and reduces the risk of malevolent activity without collusion.the sentence this term was read in
generalized from a web lookup of the quoted expression at proposal time Verdict: compositional.
A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.
A web lookup ran when this term was proposed
A compositional phrase, not a term of art. "Malevolent activity without collusion" describes the class of insider harm — intentional misuse of access or privilege — that a *single* individual can carry out acting alone. It encodes the principle that no user should be given enough privileges to misuse a system on their own; separating duties means no one individual holds all the "keys to the kingdom," so that bad behaviour would require two or more insiders to team up. Across NIST SP 800-53 (AC-5) and SP 800-171 (3.1.4), the phrase appears exclusively as the stated *purpose* of separation of duties — the risk category that the control is designed to reduce — rather than as a standalone concept with its own definition or scope.
Advisory only. A term this product ships is defined by an authority document, not by a search result.
Proposed during multiword review of this document in the CKI mapping queue.
Attested in
Classifications
Entity Type
Sensitivity
Information Class
Variants
- plural
- malevolent activities
- possessive
- malevolent activity's
- pluralpossessive
- malevolent activities'
Framework definitions
- §1 · attested_usage_reviewer_confirmed
- No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.Increment 2: attested in 800-171r3 without a glossary definition.
- §1 · web_lookup_draft
- This is a compositional prepositional phrase, not a term of art with a specialized or stipulated meaning. It functions as the condition-modifier in a risk statement: it describes the circumstance in which harmful, intentional acts by insiders — fraud, sabotage, unauthorized disclosure — can be carried out by a single individual acting alone, without needing to coordinate with or depend on another person. Separation of duties addresses the potential for abuse of authorized privileges and helps to reduce the risk of malevolent activity without collusion — meaning that when duties are properly divided, no one person retains enough unilateral access or authority to complete a harmful act on their own. The phrase is used across access-control and insider-threat literature as shorthand for the residual single-actor threat that separation of duties is designed to neutralize, and its meaning is entirely derivable from its component words in ordinary English.DR-088 backfill from the noun definition column