The biggest threat to corporate security is the same threat we've always had: It's not unauthorized access to information--it's abuses of authorized access to information. It's not a new threat, but there are new ways of abusing that same access. Twenty-five years ago we didn't have to worry about employees taking pictures of customer information with their cell phones. We didn't have to worry about employees with USB drives on their key chains. There are new ways of thinking about old threats. It's not just employees. This can be by employees, customers, business partners or outsourcing partners who have authorized access. And there are no best practices that extend from company to company.
Source: Baseline, http://www.baselinemag.com