The risks to IT security can come from within as well as outside.