The threat posed by insiders should be a concern for every organization.
Authorized personnel have the accesses to cause serious damage through
theft, sabotage, neglect or error.
CERT and the US Secret Service banded together and conducted a study of
insider security incidents. Links below contain the results of their study,
an executive summary and best practices to prevent compromise.