The statement "The risks to IT security can come from within as well as outside." is true because many IT securtiy attacks are a result of securtiy lapses caused by employees