An unauthorized entity outside the security domain that has the potential to harm an information system through destruction, disclosure, modification of data, and/or denial of service.
Source(s):
CNSSI 4009-2015
[Superseded]
from
NIST SP 800-32 - Adapted
An unauthorized entity from outside the domain perimeter that has the potential to harm an Information System through destruction, disclosure, modification of data, and/or denial of service.
Source(s):
NIST SP 800-32
[Withdrawn]
under Outside Threat