While organisations secure their walls against external threats, internal vulnerabilities put them at risk.