home/glossary/malevolent activity

malevolent activity

MWEid 163563·updated Aug 30, 2026
verified

No definition recorded.

Composition

malevolent+activity

Source

document
NIST SP 800-171 Rev 3 - Protecting CUI in Nonfederal Systems
found in
proposed during MWE review
element
e0188
proposed by
dorianc@moxywolf.com
discovery
ManualCuration
and reduces the risk of malevolent activity without collusion.the sentence this term was read in
Where the definition came fromawaiting curator confirmation

generalized from a web lookup of the quoted expression at proposal time Verdict: compositional.

A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.

A web lookup ran when this term was proposed

A compositional phrase, not a term of art. "Malevolent activity without collusion" describes the class of insider harm — intentional misuse of access or privilege — that a *single* individual can carry out acting alone. It encodes the principle that no user should be given enough privileges to misuse a system on their own; separating duties means no one individual holds all the "keys to the kingdom," so that bad behaviour would require two or more insiders to team up. Across NIST SP 800-53 (AC-5) and SP 800-171 (3.1.4), the phrase appears exclusively as the stated *purpose* of separation of duties — the risk category that the control is designed to reduce — rather than as a standalone concept with its own definition or scope.

Advisory only. A term this product ships is defined by an authority document, not by a search result.

Proposed during multiword review of this document in the CKI mapping queue.

Attested in

No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.

Classifications

No parent term linked
MWE terms inherit classifications from a parent verb or noun. This MWE has no parent linkage; it is classified only by term-type and status.

Framework definitions

No framework-specific definitions
This term has not been bound to a regulatory framework with a sense definition.

Outgoing relationships

No outgoing triples
This term is not the subject of any RDF-style relationship yet.

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.