I have written and pontificated often enough on the dangers of trusted employees. One of the biggest shifts underway in the threatscape is due to the increased value of personal identity information and the emergence of markets for that information. This change means that traditional security measures which were focussed on keeping viruses and worms out, and the occasional malicious hacker, are not going to protect you from today’s threat: your own employees and contractors.
Full story: http://blogs.zdnet.com/threatchaos/?p=460