The external risks to business data are widely recognised: from terrorist attacks to natural disasters, and hackers determined to breach security. Increasingly however, the organisation also needs to plan for and protect against internal threats - from the malicious attacks of disgruntled employees, to the chaos potentially wrought through the thoughtless acts and errors of individuals with access to key data files.