A Chief Information Security Officer (CISO) wants to explicitly raise awareness about the increase of ransomware-as-a-service in a report to the management team. Which of the following best describes the threat actor in the CISO’s report?

Organized crime is the most fitting description because ransomware-as-a-service (RaaS) operations are typically run by sophisticated, financially motivated criminal groups. These groups develop ransomware and lease it to affiliates, focusing on profit generation. Insider threats are individuals within an organization, not external RaaS providers. Hacktivists are motivated by political or social causes, not primarily financial gain through RaaS. Nation-state actors often engage in espionage or critical infrastructure attacks, but while they might use ransomware, the as-a-service model is predominantly a hallmark of financially driven organized crime.