-Dishonest employees make up another 13% of information security problems. Fraud and theft can be committed by insiders and outsiders, but it more likely to be done by our own employees. In a related area, disgruntled employees make up another 10% of the problem. Employees are most familiar with the organization’s information assets and processing systems, including knowing what actions might cause the most damage, mischief or sabotage. In this period of economic upheaval the information security program that implements need-to-know requirements and least-privilege authorizations will have a better chance of protecting its valued information assets.-