Why are internal threats, such as social engineering, considered significant in information security?
- They originate outside the organization
- Employees may have inside knowledge and can be tricked
- They involve hardware malfunctions
- They are less likely to lead to cyber attacks