Data held by firms is central to their continued existence and needs protection from those that would wish to abuse it. But while there are countless malevolent external actors, hackers and fraudsters, when looking closer to home not all firms properly protect information from abuse by employees.