Internal threats Employees can have a good knowledge of how their organisation's systems work. They can know passwords and details about applications, which can make it easier to introduce viruses or weaknesses.
Internal threats can come from software developers leaving trapdoors and errors.
Such people can be disgruntled and seeking revenge, or they can be planning to leave with the company's trade secrets. Employees can also be bribed, extorted or have themselves or their families threatened. Security guards, cleaners, contractors and even suppliers can all provide a means whereby the tightest of information security policies can be subverted and undermined. The greatest threat comes from malicious employees who would use their position to damage the company through its information systems. Most IT security mechanisms are designed to keep people out, and are not very effective at combating internal security threats.