This whole thread is getting far afield of IDs.
Network security is a key to a secure working enviroment.
I got some others if anyone cares to continue this theme. As Mr. Spafford stated earlier, most problems come from the inside of an organization. The true question in my opinion is assessing the threats posed by employees, or members of a given group, when their disposition may change quite radically in a short period of time. Since these people are already members of this group they probably aready have a certain amount of access to the computer system. Their position is much better than someone trying to pull off a simple social engineering ploy.