i think the answer is their own users. Most of the technological intrusion to our phone or computer actually could be easily prevented if we follow simple security measures such as turning up firewall, activating the anti-virus, not downloading from unreliable sources, using VPN, etc.
Most organizations would agree that inside jobs steal money or product from the organization would become their worst security problem. When outside forces come inside the organization you should be able to trust them. When things start happening within the organization you wouldn't suspect someone who's working there.
