By now everyone in IT is fully aware that the greatest security threat comes from within--such as a disgruntled employee who steals files, or an ignorant user who doesn't take time to use the security software on their system, leaving an open door to networks. But there are some best practices IT leaders and security managers can exploit to decrease internal security risks. The first is learning who inside might be a potential hacker or threat, and the second is understanding the various threats and attack approaches that are taken by internal hackers. Then it's time to make sure that everyone has access to what they need and nothing more.

For more on reducing the internal security risk factor:
- read this article at CSO