Organisations are more vulnerable to penetration by the acts of employees and contractors than by external sources.