A key threat for information security stems from the immediate environment of a company.