External threats are more numerous, but it is the targeted, knowledgeable hits from the insider that cause most harm