The threats to technology from internal staff, contractors etc. are often overlooked.
I intend to find tools and stories that are directly related to data and financial loss from organisations from the Insiders.
An often-quoted figure for computer security breeches from Insiders is 70%. It is my belief that this figure is likely to be a great deal higher but mostly undetected.
Insider Threats vary greatly from the wholesale theft of intellectual property or cold, hard cash to the unauthorised installation of material onto a company system.
It is not always the disgruntled employees who are the threat, it is entirely possible that the best-intentioned acts are cause for concern, users of company systems need to be educated as to what is acceptable behaviour, and what is not.
This does not remove the responsibility for companies to protect their assets appropriately. Most companies will be protecting their assets from Outsiders but Insiders have the same motivations and social cross-section, so why not protect their assets from them, too?