Over half the risks related to security violations stem from internal mischief or mistakes. In addition to willful theft, sabotage and destruction, an array of problems is caused by carelessness, misunderstandings and system complexity. While the tools that help protect against information attacks from the outside get publicity, new technologies may help mitigate the larger issue of internal security. Help is on the way from biometrics, personalization, authorization systems and intelligent agents.